CVE-2008-0062: Null Pointer Dereference
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0062?
CVE-2008-0062 has a severity rating that indicates it can lead to denial of service and potentially arbitrary code execution.
How do I fix CVE-2008-0062?
To fix CVE-2008-0062, upgrade to a patched version of MIT Kerberos 5 beyond 1.6.3 or apply available security updates for your operating system.
What products are affected by CVE-2008-0062?
CVE-2008-0062 affects multiple distributions of MIT Kerberos 5, as well as certain versions of Debian and Ubuntu Linux.
Can CVE-2008-0062 be exploited remotely?
Yes, CVE-2008-0062 can be exploited by remote attackers through crafted messages that cause a denial of service.
What are the potential consequences of CVE-2008-0062?
The potential consequences of CVE-2008-0062 include service disruption due to crashes and the risk of arbitrary code execution.