CVE-2011-1529

2011-10-1800:00:00

ubuntu.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.738 High

EPSS

Percentile

98.1%

JSON

The lookup_lockout_policy function in the Key Distribution Center (KDC) in
MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the
db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to
cause a denial of service (NULL pointer dereference and daemon crash) via
vectors that trigger certain process_as_req errors.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchkrb5< 1.8.1+dfsg-2ubuntu0.10UNKNOWN
ubuntu10.10noarchkrb5< 1.8.1+dfsg-5ubuntu0.8UNKNOWN
ubuntu11.04noarchkrb5< 1.8.3+dfsg-5ubuntu2.2UNKNOWN
ubuntu11.10noarchkrb5< 1.9.1+dfsg-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	krb5	< 1.8.1+dfsg-2ubuntu0.10	UNKNOWN
ubuntu	10.10	noarch	krb5	< 1.8.1+dfsg-5ubuntu0.8	UNKNOWN
ubuntu	11.04	noarch	krb5	< 1.8.3+dfsg-5ubuntu2.2	UNKNOWN
ubuntu	11.10	noarch	krb5	< 1.9.1+dfsg-1ubuntu1.1	UNKNOWN