{"schemaVersion":3,"id":"CVE-2011-0281","aliases":["DEBIAN-CVE-2011-0281"],"status":"published","duplicateOf":null,"title":null,"description":"The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \\n sequence.","dates":{"published":"2011-02-10T17:00:00.000Z","modified":"2024-08-06T21:51:07.754Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04202,"percentile":0.90858,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.04202},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04202,"percentile":0.90858}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04202,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04202,"percentile":0.90858}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.8.3+dfsg-5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.3+dfsg-5","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos","name":"kerberos","label":"kerberos","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5-1.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"5-1.6.3","eol":null,"hubHref":"/vendor/mit/kerberos"},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.6","noFixRecorded":false,"fixedIn":null},{"text":"1.6.1","noFixRecorded":false,"fixedIn":null},{"text":"1.6.2","noFixRecorded":false,"fixedIn":null},{"text":"1.7","noFixRecorded":false,"fixedIn":null},{"text":"1.7.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8","noFixRecorded":false,"fixedIn":null},{"text":"1.8.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8.2","noFixRecorded":false,"fixedIn":null},{"text":"1.8.3","noFixRecorded":false,"fixedIn":null},{"text":"1.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.6 | 1.6.1 | 1.6.2 | 1.7 | 1.7.1 | 1.8 | 1.8.1 | 1.8.2 | 1.8.3 | 1.9","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:025","label":"www.mandriva.com/security/advisories?name=MDVSA-2011:025","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.securityfocus.com/bid/46265","label":"www.securityfocus.com/bid/46265","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","label":"www.securityfocus.com/archive/1/520102/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/46397","label":"secunia.com/advisories/46397","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2011/0347","label":"www.vupen.com/english/advisories/2011/0347","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43260","label":"secunia.com/advisories/43260","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0333","label":"www.vupen.com/english/advisories/2011/0333","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0199.html","label":"www.redhat.com/support/errata/RHSA-2011-0199.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/43273","label":"secunia.com/advisories/43273","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt","label":"web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/516299/100/0/threaded","label":"www.securityfocus.com/archive/1/516299/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securitytracker.com/id?1025037","label":"www.securitytracker.com/id?1025037","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","label":"www.vmware.com/security/advisories/VMSA-2011-0012.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:024","label":"www.mandriva.com/security/advisories?name=MDVSA-2011:024","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2011/0464","label":"www.vupen.com/english/advisories/2011/0464","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://securityreason.com/securityalert/8073","label":"securityreason.com/securityalert/8073","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65324","label":"exchange.xforce.ibmcloud.com/vulnerabilities/65324","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.vupen.com/english/advisories/2011/0330","label":"www.vupen.com/english/advisories/2011/0330","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://mailman.mit.edu/pipermail/kerberos/2010-December/016800.html","label":"mailman.mit.edu/pipermail/kerberos/2010-December/016800.html","hostname":"mailman.mit.edu","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://secunia.com/advisories/43275","label":"secunia.com/advisories/43275","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0200.html","label":"www.redhat.com/support/errata/RHSA-2011-0200.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-0281","label":"security-tracker.debian.org/tracker/CVE-2011-0281","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10004-1","RHSA-2011:0199","RHSA-2011:0200"],"duplicates":[],"related":["OPENSUSE-SU-2024:10004-1"]},"timeline":[{"kind":"published","date":"2011-02-10T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T21:51:07.754Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T12:57:19.815Z","stale":false,"partial":false}}