Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1529
HistoryOct 20, 2011 - 9:55 p.m.

CVE-2011-1529

2011-10-2021:55:00
CWE-20
[email protected]
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.738 High

EPSS

Percentile

98.1%

JSON

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.

Affected configurations

NVD
Node
mitkerberos_5Match1.8
OR
mitkerberos_5Match1.8.1
OR
mitkerberos_5Match1.8.2
OR
mitkerberos_5Match1.8.3
OR
mitkerberos_5Match1.8.4
OR
mitkerberos_5Match1.9
OR
mitkerberos_5Match1.9.1

Related

cvelist 1
cve 1
debiancve 1
prion 1
ubuntucve 1
veracode 1
openvas 20
nessus 14
osv 1
debian 1
securityvulns 2
ubuntu 1
oraclelinux 1
redhat 1
amazon 1
suse 1
cert 1
fedora 4
gentoo 1
cvelist
cvelist
CVE-2011-1529
2011-10-20 21:00:00
cve
cve
CVE-2011-1529
2011-10-20 21:55:00
debiancve
debiancve
CVE-2011-1529
2011-10-20 21:55:00
prion
prion
Null pointer dereference
2011-10-20 21:55:00
ubuntucve
ubuntucve
CVE-2011-1529
2011-10-18 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:59
openvas
openvas
Mandriva Update for krb5 MDVSA-2011:160 (krb5)
2011-10-31 00:00:00
Debian: Security Advisory (DSA-2379-1)
2012-02-11 00:00:00
Mandriva Update for krb5 MDVSA-2011:160 (krb5)
2011-10-31 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : krb5 (MDVSA-2011:160)
2011-10-24 00:00:00
Debian DSA-2379-1 : krb5 - several vulnerabilities
2012-01-12 00:00:00
Fedora 14 : krb5-1.8.4-3.fc14 (2011-14650)
2011-11-16 00:00:00
osv
osv
krb5 - several
2012-01-04 00:00:00
debian
debian
[SECURITY] [DSA 2379-1] krb5 security update
2012-01-04 19:04:11
securityvulns
securityvulns
MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529]
2011-10-24 00:00:00
MIT krb5 FTP server privilege escalation
2011-10-24 00:00:00
ubuntu
ubuntu
Kerberos Vulnerabilities
2011-10-18 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-10-18 00:00:00
redhat
redhat
(RHSA-2011:1379) Moderate: krb5 security update
2011-10-18 00:00:00
amazon
amazon
Medium: krb5
2011-10-31 18:26:00
suse
suse
krb5: fixed kdc remote denial of service ( CVE-2011-1528, CVE-2011-1529) and unauthorized file access (CVE-2011-1526) (important)
2011-10-24 14:08:23
cert
cert
Multiple MIT KRB5 KDC daemon vulnerabilities
2011-10-24 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9.1-14.fc15
2011-11-16 00:26:53
[SECURITY] Fedora 15 Update: krb5-1.9.2-4.fc15
2012-01-31 21:55:08
[SECURITY] Fedora 15 Update: krb5-1.9.3-2.fc15
2012-06-13 21:36:32
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.738 High

EPSS

Percentile

98.1%

JSON
Related for NVD:CVE-2011-1529
cvelist1cve1debiancve1prion1ubuntucve1veracode1openvas20nessus14osv1debian1securityvulns2ubuntu1oraclelinux1redhat1amazon1suse1cert1fedora4gentoo1