CVE-2008-0062
Critical · 9.8CVSS
9.8
EPSS
10.1%
Published
Mar 19, 2008
CISA due date
—
The record
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | krb5 | 0 | 1.6.dfsg.3~beta1-4 |
| Debian:11 | krb5 | 0 | 1.6.dfsg.3~beta1-4 |
| Debian:12 | krb5 | 0 | 1.6.dfsg.3~beta1-4 |
| Debian:13 | krb5 | 0 | 1.6.dfsg.3~beta1-4 |
| Debian:3.1 | krb5 | 0 | 1.3.6-2sarge6 |
| Debian:4.0 | krb5 | 0 | 1.4.4-7etch5 |
| Red Hat:enterprise_linux:2.1::as | krb5 | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::as | krb5-devel | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::as | krb5-libs | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::as | krb5-server | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::as | krb5-workstation | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::aw | krb5 | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::aw | krb5-devel | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::aw | krb5-libs | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::aw | krb5-server | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::aw | krb5-workstation | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::es | krb5 | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::es | krb5-devel | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::es | krb5-libs | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::es | krb5-server | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::es | krb5-workstation | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::ws | krb5 | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::ws | krb5-devel | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::ws | krb5-libs | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::ws | krb5-server | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:2.1::ws | krb5-workstation | 0 | 0:1.2.2-48 |
| Red Hat:enterprise_linux:3::as | krb5 | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::as | krb5-debuginfo | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::as | krb5-devel | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::as | krb5-libs | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::as | krb5-server | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::as | krb5-workstation | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5 | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5-debuginfo | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5-devel | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5-libs | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5-server | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::desktop | krb5-workstation | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5 | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5-debuginfo | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5-devel | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5-libs | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5-server | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::es | krb5-workstation | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5 | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5-debuginfo | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5-devel | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5-libs | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5-server | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:3::ws | krb5-workstation | 0 | 0:1.2.7-68 |
| Red Hat:enterprise_linux:4::as | krb5 | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::as | krb5-debuginfo | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::as | krb5-devel | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::as | krb5-libs | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::as | krb5-server | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::as | krb5-workstation | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5 | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5-debuginfo | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5-devel | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5-libs | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5-server | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | krb5-workstation | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5 | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5-debuginfo | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5-devel | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5-libs | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5-server | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::es | krb5-workstation | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5 | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5-debuginfo | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5-devel | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5-libs | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5-server | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | krb5-workstation | 0 | 0:1.3.4-54.el4_6.1 |
| Red Hat:enterprise_linux:5::client | krb5 | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client | krb5-debuginfo | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client | krb5-devel | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client | krb5-libs | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client | krb5-server | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client | krb5-workstation | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5 | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-debuginfo | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-devel | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-libs | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-server | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-workstation | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5 | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5-debuginfo | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5-devel | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5-libs | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5-server | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:enterprise_linux:5::server | krb5-workstation | 0 | 0:1.6.1-17.el5_1.1 |
| Red Hat:rhel_eus:4.5::as | krb5 | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::as | krb5-debuginfo | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::as | krb5-devel | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::as | krb5-libs | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::as | krb5-server | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::as | krb5-workstation | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5 | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5-debuginfo | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5-devel | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5-libs | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5-server | 0 | 0:1.3.4-49.el4_5.1 |
| Red Hat:rhel_eus:4.5::es | krb5-workstation | 0 | 0:1.3.4-49.el4_5.1 |
| openSUSE:Tumbleweed | krb5 | 0 | 1.19.2-2.2 |
Related vulnerabilities
- CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded… Also affects krb5
- CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… Also affects krb5
- CVE-2009-3295 The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral… Also affects krb5
- CVE-2007-3999 Stack-based buffer overflow in the svcauth_gss_validate function in… Also affects krb5
- CVE-2007-2442 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and… Also affects krb5
- CVE-2007-0957 Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as… Also affects krb5
- CVE-2007-0956 The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass… Also affects krb5
- CVE-2005-1689 Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1… Also affects krb5