CVE Feed

Dashboard / CVE / CVE-2008-0062

CVE-2008-0062

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

Published:Mar 18, 2008

Last Modified:Apr 23, 2026

EPS:Mar 19, 2008

EPSS Score:0.16257

CVSS Score:9.8

Affected Products

Vendor

Product

Action

Vendor

Canonical

Product

Ubuntu Linux

Canonical

Ubuntu Linux

Vendor

Debian

Product

Debian Linux

Debian

Debian Linux

Vendor

Fedoraproject

Product

Fedora

Fedoraproject

Fedora

Vendor

Mit

Product

Kerberos 5

Mit

Kerberos 5

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Rhel Eus

Redhat

Rhel Eus

Exploits

No exploit reference

Common Weakness Enumeration

CWE-665 Improper Initialization

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-26 Leveraging Race Conditions

CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Related CVEs

CVE-2026-13476 (CVSS 7.3) — IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co…

CVE-2026-13367 (CVSS 7.8) — IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s…

CVE-2026-47337 (CVSS 3.3) — Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling …

CVE-2026-47336 (CVSS 3.3) — Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/A…

CVE-2026-47335 (CVSS 5.5) — Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor n…

CVE-2026-47334 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock…

CVE-2026-47333 (CVSS 7.8) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the si…

CVE-2026-47332 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an intern…

CVE-2026-47331 (CVSS 7.8) — Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An…

CVE-2026-47330 (CVSS 3.3) — Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an u…

References

http://docs.info.apple.com/article.html?artnum=307562

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html

http://marc.info/?l=bugtraq&m=130497213107107&w=2

http://secunia.com/advisories/29420

http://secunia.com/advisories/29423

http://secunia.com/advisories/29424

http://secunia.com/advisories/29428

http://secunia.com/advisories/29435

http://secunia.com/advisories/29438

http://secunia.com/advisories/29450

http://secunia.com/advisories/29451

http://secunia.com/advisories/29457

http://secunia.com/advisories/29462

http://secunia.com/advisories/29464

http://secunia.com/advisories/29516

http://secunia.com/advisories/29663

http://secunia.com/advisories/30535

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt

http://wiki.rpath.com/Advisories:rPSA-2008-0112

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

http://www.debian.org/security/2008/dsa-1524

http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml

http://www.kb.cert.org/vuls/id/895609

http://www.mandriva.com/security/advisories?name=MDVSA-2008:069

http://www.mandriva.com/security/advisories?name=MDVSA-2008:070

http://www.mandriva.com/security/advisories?name=MDVSA-2008:071

http://www.redhat.com/support/errata/RHSA-2008-0164.html

http://www.redhat.com/support/errata/RHSA-2008-0180.html

http://www.redhat.com/support/errata/RHSA-2008-0181.html

http://www.redhat.com/support/errata/RHSA-2008-0182.html

http://www.securityfocus.com/archive/1/489761

http://www.securityfocus.com/archive/1/489883/100/0/threaded

http://www.securityfocus.com/archive/1/493080/100/0/threaded

http://www.securityfocus.com/bid/28303

http://www.securitytracker.com/id?1019626

http://www.ubuntu.com/usn/usn-587-1

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

http://www.vupen.com/english/advisories/2008/0922/references

http://www.vupen.com/english/advisories/2008/0924/references

http://www.vupen.com/english/advisories/2008/1102/references

http://www.vupen.com/english/advisories/2008/1744

https://exchange.xforce.ibmcloud.com/vulnerabilities/41275

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html

http://docs.info.apple.com/article.html?artnum=307562

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html

http://marc.info/?l=bugtraq&m=130497213107107&w=2

http://secunia.com/advisories/29420

http://secunia.com/advisories/29423

http://secunia.com/advisories/29424

http://secunia.com/advisories/29428

http://secunia.com/advisories/29435

http://secunia.com/advisories/29438

http://secunia.com/advisories/29450

http://secunia.com/advisories/29451

http://secunia.com/advisories/29457

http://secunia.com/advisories/29462

http://secunia.com/advisories/29464

http://secunia.com/advisories/29516

http://secunia.com/advisories/29663

http://secunia.com/advisories/30535

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt

http://wiki.rpath.com/Advisories:rPSA-2008-0112

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

http://www.debian.org/security/2008/dsa-1524

http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml

http://www.kb.cert.org/vuls/id/895609

http://www.mandriva.com/security/advisories?name=MDVSA-2008:069

http://www.mandriva.com/security/advisories?name=MDVSA-2008:070

http://www.mandriva.com/security/advisories?name=MDVSA-2008:071

http://www.redhat.com/support/errata/RHSA-2008-0164.html

http://www.redhat.com/support/errata/RHSA-2008-0180.html

http://www.redhat.com/support/errata/RHSA-2008-0181.html

http://www.redhat.com/support/errata/RHSA-2008-0182.html

http://www.securityfocus.com/archive/1/489761

http://www.securityfocus.com/archive/1/489883/100/0/threaded

http://www.securityfocus.com/archive/1/493080/100/0/threaded

http://www.securityfocus.com/bid/28303

http://www.securitytracker.com/id?1019626

http://www.ubuntu.com/usn/usn-587-1

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

http://www.vupen.com/english/advisories/2008/0922/references

http://www.vupen.com/english/advisories/2008/0924/references

http://www.vupen.com/english/advisories/2008/1102/references

http://www.vupen.com/english/advisories/2008/1744

https://exchange.xforce.ibmcloud.com/vulnerabilities/41275

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High