Double Free in Mit Kerberos 5
CVE-2004-0642
Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.
Vulnerability class: Double Free
EPSS: 0.083 (94.3th percentile) — read the EPSS interpretation.
Affected products
- Mit Kerberos_5
- Debian Debian_linux — versions 3.0
- Redhat Enterprise_linux_desktop — versions 3.0
- Redhat Enterprise_linux_server — versions 3.0
- Redhat Enterprise_linux_workstation — versions 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA, Broken Link)
- cve@mitre.org (Broken Link, x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (Broken Link, x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX, Broken Link)
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, Broken Link, third-party-advisory)
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, Issue Tracking)