Approved changes feed: RSS · Atom

cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorMit (82b7f5d9-694f-5ac9-86aa-26958677636b)
ProductKerberos 5 (774ea4a1-4fda-5d25-92ac-c66a6356a1e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/krb5/krb5 purl2cpe 2026-06-01 10:16:02.475388
pkg:rpm/fedora/krb5 purl2cpe 2026-06-01 10:16:02.475389

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3119 vulnerable 2026-06-08 05:07:44.500126 Details available
The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
Published: 2016-03-26T01:00:00.000Z
Updated: 2024-08-05T23:47:57.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0523 vulnerable 2026-06-08 04:47:50.082245 Details available
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
Published: 2004-06-03T04:00:00.000Z
Updated: 2024-08-08T00:24:25.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0082 vulnerable 2026-06-08 04:47:20.458677 Details available
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").
Published: 2003-03-26T05:00:00.000Z
Updated: 2024-08-08T01:43:35.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0072 vulnerable 2026-06-08 04:47:20.421574 Details available
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").
Published: 2003-03-26T05:00:00.000Z
Updated: 2024-08-08T01:43:35.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0554 vulnerable 2026-06-08 04:45:20.473045 Details available
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-08T04:21:38.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0247 vulnerable 2026-06-08 04:45:19.948002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0550 vulnerable 2026-06-08 04:45:18.311730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0549 vulnerable 2026-06-08 04:45:18.311252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0548 vulnerable 2026-06-08 04:45:18.305257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0547 vulnerable 2026-06-08 04:45:18.304765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0546 vulnerable 2026-06-08 04:45:18.304034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0514 vulnerable 2026-06-08 04:45:18.218476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0392 vulnerable 2026-06-08 04:44:58.478567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0391 vulnerable 2026-06-08 04:44:58.478167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0390 vulnerable 2026-06-08 04:44:58.477747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0389 vulnerable 2026-06-08 04:44:58.477249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.