CVE-2013-6800 Null dereference in n/a
Remote authenticated users can crash the MIT Kerberos KDC daemon via a crafted request due to a NULL pointer dereference in a third-party database module.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-6800?
CVE-2013-6800 is a medium-severity vulnerability in Mit Kerberos 5, published on 16 Nov 2013. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.
Which versions are affected by CVE-2013-6800?
It affects 2 products.
Products include Mit Kerberos, Mit Kerberos 5.
How do I fix CVE-2013-6800?
Upgrade to a fixed version.
Is CVE-2013-6800 being exploited?
There is no known exploitation of CVE-2013-6800 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as GHSA-f64v-2v58-4rrx.