{"schemaVersion":3,"id":"CVE-2007-5972","aliases":["DEBIAN-CVE-2007-5972"],"status":"published","duplicateOf":null,"title":null,"description":"Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors.  NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.","dates":{"published":"2007-12-06T02:00:00.000Z","modified":"2024-08-07T15:47:00.635Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9,"severity":"high","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02676,"percentile":0.85583,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02676},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02676,"percentile":0.85583}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02676,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02676,"percentile":0.85583}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.6.dfsg.4~beta1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.dfsg.4~beta1-1","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/39784","label":"secunia.com/advisories/39784","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/USN-940-1","label":"www.ubuntu.com/usn/USN-940-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","label":"www.novell.com/linux/security/advisories/suse_security_summary_report.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.securityfocus.com/bid/26750","label":"www.securityfocus.com/bid/26750","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0321.html","label":"seclists.org/fulldisclosure/2007/Dec/0321.html","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC"]},{"url":"http://www.vupen.com/english/advisories/2010/1192","label":"www.vupen.com/english/advisories/2010/1192","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://osvdb.org/44747","label":"osvdb.org/44747","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0176.html","label":"seclists.org/fulldisclosure/2007/Dec/0176.html","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC"]},{"url":"http://secunia.com/advisories/39290","label":"secunia.com/advisories/39290","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://ubuntu.com/usn/usn-924-1","label":"ubuntu.com/usn/usn-924-1","hostname":"ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/28636","label":"secunia.com/advisories/28636","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=199211","label":"bugs.gentoo.org/show_bug.cgi?id=199211","hostname":"bugs.gentoo.org","tags":["X Refsource MISC"]},{"url":"https://issues.rpath.com/browse/RPL-2012","label":"issues.rpath.com/browse/RPL-2012","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-5972","label":"security-tracker.debian.org/tracker/CVE-2007-5972","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10899-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10899-1"]},"timeline":[{"kind":"published","date":"2007-12-06T02:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T15:47:00.635Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:31:45.528Z","stale":false,"partial":false}}