CVE-2005-1175 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Kerberos 5

9 documents8 sources

Severity

7.5HIGHNVD

EPSS

45.4%

top 2.38%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

MIT Krb5 MIT Kerberos 5

Timeline

PublishedJul 18

Latest updateMay 3

Description

Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianmit/krb5< 1.3.6-4+3

▶NVDmit/kerberos_59 versions+8

Patches

Patch: web.mit.edu ↗Patch: www.debian.org ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

GHSA

GHSA-5hv4-qhm2-g82w: Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1↗2022-05-03

▶

OSV

CVE-2005-1175: Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1↗2005-07-18

▶

CVEList

CVE-2005-1175: Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1↗2005-07-17

▶

📋Vendor Advisories

Ubuntu

Kerberos vulnerabilities↗2005-12-06

▶

Red Hat

security flaw↗2005-07-12

▶

Debian

CVE-2005-1175: krb5 - Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos ...↗2005

▶

💬Community

Bugzilla

CVE-2005-1175 security flaw↗2018-08-16

▶

Bugzilla

CAN-2004-1009 Multiple mc issues (CAN-2004-1090 CAN-2004-1091 CAN-2004-1093 CAN-2004-1174 CAN-2004-1175 CAN-2005-0763)↗2005-05-24

▶