CVE-2011-1530: mit mit_kerberos Resource Management Errors
Vulnerability summary
CVE-2011-1530 is a medium (CVSS 6.8) Resource Management Errors vulnerability in mit mit_kerberos. EPSS estimates a 2.38% chance of exploitation in the next 30 days, higher than 83.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 08-12-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.38%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.38% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat8 products
- krb5< 0:1.9-22.el6_2.1
- krb5-debuginfo< 0:1.9-22.el6_2.1
- krb5-devel< 0:1.9-22.el6_2.1
- krb5-libs< 0:1.9-22.el6_2.1
- krb5-pkinit-openssl< 0:1.9-22.el6_2.1
Debian1 product
- krb5< 1.10+dfsg~alpha1-7
Mit1 product
- mit_kerberos5.1.9 | 5.1.9.1 | 5.1.9.2
3 vendors · 10 products
