CVE-2000-0550Kerberos vulnerability

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
3.1%
top 13.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 9
Latest updateApr 30

Description

Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

NVDmit/kerberos4.0
NVDmit/kerberos_51.0, 1.1, 1.1.1+2

Patches

🔴Vulnerability Details

2
GHSA
GHSA-2j8h-wx6g-vcxm: Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service2022-04-30
CVEList
CVE-2000-0550: Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service2000-10-13

📋Vendor Advisories

1
Red Hat
security flaw2000-06-09

💬Community

1
Bugzilla
CVE-2000-0550 security flaw2018-08-16
CVE-2000-0550 — MIT Kerberos vulnerability | cvebase