← Database

CVE-2008-0062

CRITICAL CVSS: 9.8 Published: 2008-03-19 Modified: 2026-06-16

Description

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

Affected Platforms

Debian Debian LinuxMit Kerberos 5Canonical Ubuntu LinuxFedoraproject Fedora

Weakness Type

CWE-665

References