CVE-2006-6143

Published Jan 10, 2007 CVSS 2.0 · 9.3 Critical EPSS 8.2% KEV · Not listed
Description
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-408-1 krb5 vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:19 PM
Reserved
Nov 28, 2006, 12:00 AM
Status
Modified
Published
Dec 31, 2006, 5:00 AM
Modified
Jun 16, 2026, 10:32 PM