Mit Kerberos 5 1.6
Approved changes feed: RSS · Atom
cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*
part: a version: 1.6 update: *
| Vendor | Mit (82b7f5d9-694f-5ac9-86aa-26958677636b) |
|---|---|
| Product | Kerberos 5 (774ea4a1-4fda-5d25-92ac-c66a6356a1e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/krb5/krb5 |
purl2cpe | 2026-06-01 10:16:02.498632 |
pkg:rpm/fedora/krb5 |
purl2cpe | 2026-06-01 10:16:02.498633 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-3119 |
vulnerable | 2026-06-08 05:07:44.516522 |
Details available
The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
Published: 2016-03-26T01:00:00.000Z
Updated: 2024-08-05T23:47:57.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5355 |
vulnerable | 2026-06-08 05:05:47.736332 |
Details available
MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.
Published: 2015-02-20T11:00:00.000Z
Updated: 2024-08-06T11:41:49.279Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4345 |
vulnerable | 2026-06-08 05:05:44.644050 |
Details available
Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.
Published: 2014-08-14T01:00:00.000Z
Updated: 2024-08-06T11:12:35.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0282 |
vulnerable | 2026-06-08 04:56:36.433646 |
Details available
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
Published: 2011-02-10T17:00:00.000Z
Updated: 2024-08-06T21:51:07.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0281 |
vulnerable | 2026-06-08 04:56:36.428123 |
Details available
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
Published: 2011-02-10T17:00:00.000Z
Updated: 2024-08-06T21:51:07.754Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1323 |
vulnerable | 2026-06-08 04:54:07.217733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4212 |
vulnerable | 2026-06-08 04:51:47.609066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0845 |
vulnerable | 2026-06-08 04:51:11.634049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0844 |
vulnerable | 2026-06-08 04:51:11.632042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0947 |
vulnerable | 2026-06-08 04:50:18.330057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4743 |
vulnerable | 2026-06-08 04:49:57.085666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3999 |
vulnerable | 2026-06-08 04:49:55.528014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.