CVE-2013-6800

Published: Nov 18, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Affected (8)

Products: Mit: Kerberos, Kerberos 5

Mit

2 products

Kerberos

Kerberos 5

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos	Version 5-1.10.5
Mit Kerberos	Version 5-1.10.6
Mit Kerberos	Version 5-1.10.7
Mit Kerberos 5	Version 1.10.1
Mit Kerberos 5	Version 1.10.2
Mit Kerberos 5	Version 1.10.3
Mit Kerberos 5	Version 1.10.4
Mit Kerberos 5	Version 1.10

References (6)

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7757

Source: cve@mitre.org

http://www.securityfocus.com/bid/63770

Source: cve@mitre.org

https://github.com/krb5/krb5/commit/c2ccf4197f697c4ff143b8a786acdd875e70a89d

Source: cve@mitre.org

Patch

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7757

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/63770

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/krb5/krb5/commit/c2ccf4197f697c4ff143b8a786acdd875e70a89d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.