- Description
- The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
- nvd@nist.gov
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36823B2B-5C72-4FF3-9301-FB263EB8CE09"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59AFA33E-FEBC-45F5-9EC6-8AA363163FB5"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04D83332-B2FD-4E86-A76C-C3F1CD3B3A31"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "758A0011-20ED-414A-9DF3-50A161DF8BC2"
},
{
"criteria": "cpe:2.3:a:mit:kerberos_5:1.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7768AED0-AE4C-4D4E-8D5D-5B618AB82966"
}
],
"operator": "OR"
}
]
}
]