CVE-2019-14844CWE-628

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…

High · published September 26, 2019

CVSS v3.0
7.5
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04436 · 91.4th percentile
Weakness
CWE-628 · Function Call with Incorrectly Specified Arguments
Published
2019-09-26T11:50Z
EPSS history
Timeline
  • 26 SEP 11:50Z
    A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
    cvelistv5