VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 20, 2013· Updated Jun 16, 2026

CVE-2013-1417

CVE-2013-1417

Description

do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Mit/Kerberos 55 versions
    cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*
    • (no CPE)range: <1.11.4
  • osv-coords
    pkg:rpm/opensuse/krb5&distro=openSUSE%20Tumbleweed
    Range: < 1.15-1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.