CVE-2009-3295

Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 29 Dec 2009, 16:00
Last modified:07 Aug 2024, 06:22

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
40.34% HIGH
40% probability +37.61%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Dec 2009, 16:00
Published
Vulnerability first disclosed
07 Aug 2024, 06:22
Last Modified
Vulnerability information updated

Description

The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.

CVSS Metrics

  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 40.34%• Percentile: 98%

Affected Systems

  • mit•kerberos 5

    1.7

References (6)