Description
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request packet that does not trigger a response packet.
References
- 43260 third-party-advisory
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt
- 20110208 MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2011-0282 CVE-2011-0283] mailing-list
- 1025037 vdb-entry
- 46272 vdb-entry
- 8073 third-party-advisory
- ADV-2011-0330 vdb-entry