CVE-2011-1527 — Improper Input Validation in Kerberos 5

CWE-20 — Improper Input Validation8 documents8 sources
Severity
7.8HIGHNVD
EPSS
2.6%
top 14.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MIT Krb5MIT Kerberos 5
Timeline
PublishedOct 20
Latest updateMay 13

Description

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶Debianmit/krb5< 1.10+dfsg~alpha1-1+3
▶NVDmit/kerberos_51.9, 1.9.1+1

🔴Vulnerability Details

3
GHSA
GHSA-848m-2rw5-f2f2: The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1↗2022-05-13
▶
CVEList
CVE-2011-1527: The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1↗2011-10-20
▶
OSV
CVE-2011-1527: The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1↗2011-10-20
▶

📋Vendor Advisories

3
Ubuntu
Kerberos Vulnerabilities↗2011-10-18
▶
Red Hat
krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)↗2011-10-18
▶
Debian
CVE-2011-1527: krb5 - The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka ...↗2011
▶

💬Community

1
Bugzilla
CVE-2011-1527 CVE-2011-1528 CVE-2011-1529 CVE-2011-4151 krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)↗2011-09-12
▶
CVE-2011-1527 — Improper Input Validation in Kerberos 5 | cvebase