Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1418
HistoryNov 18, 2013 - 3:55 a.m.

CVE-2013-1418

2013-11-1803:55:05
CWE-476
[email protected]
web.nvd.nist.gov
155
4
cve-2013-1418
nvd
mit kerberos 5
denial of service
kdc
null pointer dereference
daemon crash

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.936

Percentile

99.1%

JSON

The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

Affected configurations

NVD
Node
mitkerberos_5Range<1.10.7
Node
debiandebian_linuxMatch7.0
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.2
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1

Social References

More

Related

checkpoint_advisories 1
nessus 21
cvelist 2
securityvulns 2
mageia 2
f5 4
debiancve 1
veracode 3
openvas 19
prion 2
ubuntucve 2
fedora 7
nvd 2
cve 1
ibm 1
oraclelinux 3
redhat 2
centos 2
osv 1
debian 1
gentoo 1
amazon 1
ubuntu 1
checkpoint_advisories
checkpoint_advisories
Kerberos Multi-realm KDC NULL Pointer Dereference Denial of Service (CVE-2013-1418)
2013-01-06 00:00:00
nessus
nessus
openSUSE Security Update : krb5 (openSUSE-SU-2013:1738-1)
2014-06-13 00:00:00
MIT Kerberos 5 setup_server_realm() Remote DoS
2013-11-18 00:00:00
Mandriva Linux Security Advisory : krb5 (MDVSA-2013:275)
2013-11-22 00:00:00
cvelist
cvelist
CVE-2013-1418
2013-11-16 02:00:00
CVE-2013-6800
2013-11-16 11:00:00
securityvulns
securityvulns
MIT Kerberos 5 KDC DoS
2013-11-26 00:00:00
[ MDVSA-2013:275 ] krb5
2013-11-26 00:00:00
mageia
mageia
Updated krb5 package fixes security vulnerabily
2013-11-21 00:38:57
Updated krb5 package fixes security vulnerabilities
2013-11-21 00:41:07
f5
f5
K15784 : Kerberos vulnerability CVE-2013-1418
2014-11-03 00:00:00
K15785 : Kerberos vulnerability CVE-2013-6800
2014-11-03 00:00:00
SOL15784 - Kerberos vulnerability CVE-2013-1418
2014-11-03 00:00:00
debiancve
debiancve
CVE-2013-1418
2013-11-18 03:55:05
veracode
veracode
Denial Of Service
2019-01-15 09:01:24
Denial Of Service (DoS)
2019-05-02 05:04:04
Denial Of Service (DoS)
2019-05-02 05:04:04
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:1875-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2013-0335)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2013-0336)
2022-01-28 00:00:00
prion
prion
Null pointer dereference
2013-11-18 03:55:00
Null pointer dereference
2013-11-18 02:55:00
ubuntucve
ubuntucve
CVE-2013-1418
2013-11-17 00:00:00
CVE-2013-6800
2013-11-17 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: krb5-1.11.3-29.fc20
2013-11-12 00:28:19
[SECURITY] Fedora 19 Update: krb5-1.11.3-13.fc19
2013-12-03 10:37:37
[SECURITY] Fedora 20 Update: krb5-1.11.5-10.fc20
2014-08-07 15:32:53
nvd
nvd
CVE-2013-1418
2013-11-18 03:55:05
CVE-2013-6800
2013-11-18 02:55:10
cve
cve
CVE-2013-6800
2013-11-18 02:55:10
ibm
ibm
Security Bulletin: IBM Security Network Intrusion Prevention System is affected by krb5 vulnerabilities (CVE-2014-4341, CVE-2013-1418 )
2022-02-23 19:48:26
oraclelinux
oraclelinux
krb5 security and bug fix update
2014-09-17 00:00:00
krb5 security and bug fix update
2014-10-15 00:00:00
krb5 security, bug fix and enhancement update
2015-03-11 00:00:00
redhat
redhat
(RHSA-2014:1245) Moderate: krb5 security and bug fix update
2014-09-16 00:00:00
(RHSA-2014:1389) Moderate: krb5 security and bug fix update
2014-10-14 00:00:00
centos
centos
krb5 security update
2014-09-30 11:21:52
krb5 security update
2014-10-20 18:09:24
osv
osv
krb5 - security update
2018-01-31 00:00:00
debian
debian
[SECURITY] [DLA 1265-1] krb5 security update
2018-01-31 17:06:34
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2013-12-16 00:00:00
amazon
amazon
Medium: krb5
2014-11-11 10:25:00
ubuntu
ubuntu
Kerberos vulnerabilities
2014-08-11 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.936

Percentile

99.1%

JSON
Related for CVE-2013-1418
checkpoint_advisories1nessus21cvelist2securityvulns2mageia2f54debiancve1veracode3openvas19prion2ubuntucve2fedora7nvd2cve1ibm1oraclelinux3redhat2centos2osv1debian1gentoo1amazon1ubuntu1