CVE-2011-0284

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9…

published March 20, 2011

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08267 · 94.9th percentile
Published
2011-03-20T01:00Z
EPSS history
Timeline
  • 20 MAR 01:00Z
    Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9…
    cvelistv5