CVE-2011-0284: Double Free
Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an edata field containing typed data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0284?
CVE-2011-0284 has a high severity rating due to its potential to cause daemon crashes or enable arbitrary code execution.
What versions of MIT Kerberos 5 are affected by CVE-2011-0284?
CVE-2011-0284 affects MIT Kerberos 5 versions 1.7 through 1.9 when the PKINIT feature is enabled.
How do I fix CVE-2011-0284?
To fix CVE-2011-0284, update to a patched version of MIT Kerberos 5 that addresses this double free vulnerability.
What type of vulnerability is CVE-2011-0284?
CVE-2011-0284 is a double free vulnerability that can lead to denial of service and potentially allow arbitrary code execution.
Can attackers exploit CVE-2011-0284 remotely?
Yes, attackers can exploit CVE-2011-0284 remotely, which poses a significant risk to systems using the affected versions of MIT Kerberos 5.