Bug 670567 (CVE-2011-0283) - CVE-2011-0283 krb5: uninitialized pointer use in krb5kdc leads to KDC crash
Summary: CVE-2011-0283 krb5: uninitialized pointer use in krb5kdc leads to KDC crash
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2011-0283
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL: http://web.mit.edu/kerberos/advisorie...
Whiteboard:
Depends On: 669423 676126
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-01-18 17:05 UTC by Vincent Danen
Modified: 2021-02-24 16:44 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-11-05 16:54:35 UTC
Embargoed:

Attachments (Terms of Use)

Description Vincent Danen 2011-01-18 17:05:08 UTC 
Changes in the KDC network code in the krb5-1.9 release introduced a bug that allows a null pointer dereference, which would cause the KDC to crash.  Any request packet that is sufficiently malformed that the KDC would not generate a response packet can trigger this bug.

This flaw will be addressed as part of MITKRB5-SA-2011-002.  It does not affect any version of Kerberos prior to 1.9.
Comment 2 Vincent Danen 2011-02-08 21:26:27 UTC 
This issue is now public:

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt

Statement:

This issue did not affect the versions of krb5 as shipped with Red Hat Enterprise Linux 3, 4, 5 or 6.
Comment 3 Vincent Danen 2011-02-08 21:31:26 UTC 
Created krb5 tracking bugs for this issue

Affects: fedora-rawhide [bug 676126]
Note You need to log in before you can comment on or make changes to this bug.