CVE-2011-1530: Null Pointer Dereference

Published Dec 8, 2011

Updated

The processtgsreq function in dotgsreq.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5KDBNOENTRY error.

Affected Software

3 affected components

MIT MIT Kerberos=5.1.9.2

MIT MIT Kerberos=5.1.9.1

MIT MIT Kerberos=5.1.9

Remediation

Patch Available

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-007.txt

Event History

Dec 8, 2011

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1530?

CVE-2011-1530 has a severity classification that indicates it can lead to a denial of service due to a NULL pointer dereference.

How do I fix CVE-2011-1530?

To fix CVE-2011-1530, upgrade to a patched version of MIT Kerberos 5 that addresses this vulnerability.

Who is affected by CVE-2011-1530?

CVE-2011-1530 affects remote authenticated users exploiting certain versions of MIT Kerberos 5, specifically 1.9 to 1.9.2.

What type of attack does CVE-2011-1530 enable?

CVE-2011-1530 enables a denial of service attack that can crash the Key Distribution Center.

What versions of MIT Kerberos 5 are vulnerable to CVE-2011-1530?

MIT Kerberos 5 versions 1.9, 1.9.1, and 1.9.2 are vulnerable to CVE-2011-1530.