CVE-2009-3295

The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka…

published December 29, 2009

CVSS

—

EPSS

40%

Percentile

98.6

In the wild

Unconfirmed

What it is

The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.40345 · 98.6th percentile
Published: 2009-12-29T16:00Z

EPSS history

Timeline

29 DEC 16:00Z
The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka…
cvelistv5