MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kerberos_5 | Mit | 1.3 (including) | 1.3 (including) |
| Kerberos_5 | Mit | 1.3.1 (including) | 1.3.1 (including) |
| Kerberos_5 | Mit | 1.3.2 (including) | 1.3.2 (including) |
| Kerberos_5 | Mit | 1.3.3 (including) | 1.3.3 (including) |
| Kerberos_5 | Mit | 1.3.4 (including) | 1.3.4 (including) |
| Kerberos_5 | Mit | 1.3.5 (including) | 1.3.5 (including) |
| Kerberos_5 | Mit | 1.3.6 (including) | 1.3.6 (including) |
| Kerberos_5 | Mit | 1.4 (including) | 1.4 (including) |
| Kerberos_5 | Mit | 1.4.1 (including) | 1.4.1 (including) |
| Red Hat Enterprise Linux 4 | RedHat | krb5-0:1.3.4-17 | * |
| Krb5 | Ubuntu | dapper | * |
| Krb5 | Ubuntu | devel | * |
| Krb5 | Ubuntu | edgy | * |
| Krb5 | Ubuntu | feisty | * |