p PatchFirst

CVE-2013-1417

CVE-2013-1417

This page contains facts from public vulnerability sources. Check the original advisory before updating.

do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.

EPSS 1.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • krb5 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.11.3+dfsg-3+nmu1

    Update to 1.11.3+dfsg-3+nmu1

  • krb5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.11.3+dfsg-3+nmu1

    Update to 1.11.3+dfsg-3+nmu1

  • krb5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.11.3+dfsg-3+nmu1

    Update to 1.11.3+dfsg-3+nmu1

Original sources

Check your server →