CVE-2009-0847: mit kerberos Numeric Errors

EPSS trend

Probability

2.77%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.77% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

39 links

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.htmlX Refsource MISC
www.mandriva.com/security/advisories?name=MDVSA-2009:098Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/archive/1/502526/100/0/threadedMailing ListX Refsource BUGTRAQ
www.kb.cert.org/vuls/id/662091Third Party AdvisoryX Refsource CERT VN
www.vupen.com/english/advisories/2009/0960VDB EntryX Refsource VUPEN
support.apple.com/kb/HT3549X Refsource CONFIRM
support.avaya.com/elmodocs2/security/ASA-2009-142.htmX Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/34637Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/2084VDB EntryX Refsource VUPEN

Show all 39 references

www.securityfocus.com/bid/34408VDB EntryX Refsource BID
secunia.com/advisories/34640Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35074Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1021993VDB EntryX Refsource SECTRACK
sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1Vendor AdvisoryX Refsource SUNALERT
security.gentoo.org/glsa/glsa-200904-09.xmlVendor AdvisoryX Refsource GENTOO
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.htmlX Refsource MISC
www.vupen.com/english/advisories/2009/0976VDB EntryX Refsource VUPEN
lists.apple.com/archives/security-announce/2009/May/msg00002.htmlVendor AdvisoryX Refsource APPLE
www.ubuntu.com/usn/usn-755-1Vendor AdvisoryX Refsource UBUNTU
www-01.ibm.com/support/docview.wss?uid=swg21396120X Refsource CONFIRM
www.vupen.com/english/advisories/2009/1057VDB EntryX Refsource VUPEN
web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txtX Refsource CONFIRMVendor Advisory
secunia.com/advisories/34617Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34628Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34734Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/2248VDB EntryX Refsource VUPEN
www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
wiki.rpath.com/wiki/Advisories:rPSA-2009-0058X Refsource MISC
www.vupen.com/english/advisories/2009/1297VDB EntryX Refsource VUPEN
secunia.com/advisories/34622Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.htmlVendor AdvisoryX Refsource FEDORA
www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.htmlVendor AdvisoryX Refsource FEDORA
wiki.rpath.com/Advisories:rPSA-2009-0058X Refsource CONFIRM
www.securityfocus.com/archive/1/502546/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/34594Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1106VDB EntryX Refsource VUPEN
marc.info?l=bugtraq&m=124896429301168&w=2Vendor AdvisoryX Refsource HP
security-tracker.debian.org/tracker/CVE-2009-0847Advisory

Related vulnerabilities

RoutineCVE-2018-20217debian · debian_linux +32 more7y agodebian debian_linuxA Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVSS5.3MediumEPSS1.42%RoutineCVE-2018-5710mit · kerberos +3 more8y agomit kerberosAn issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVSS6.5MediumEPSS1.80%PrioritiseCVE-2018-5709mit · kerberos +3 more8y agomit kerberosAn issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVSS7.5HighEPSS2.05%RoutineCVE-2017-11368fedoraproject · fedora +6 more9y agofedoraproject fedoraIn MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.CVSS6.5MediumEPSS2.40%RoutineCVE-2014-5354mit · kerberos +3 more11y agomit kerberosplugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.CVSS3.5LowEPSS1.74%RoutineCVE-2014-4342debian · debian_linux +8 more12y agodebian debian_linuxMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.CVSS5.0MediumEPSS6.52%

All vulnerabilities inkerberos

CVE-2009-0847: mit kerberos Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References