« List of all CVEs

CVE-2011-1529

Published: 10/20/2011 Last updated: 8/6/2024 Reserved: 3/29/2011

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (2)

conf-gssapi krb

Products affected (1)

Product Vendor Version
n/a n/a 7.2

References (12)