CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0844

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.08

EPSS Ranking 91.6%

CVSS Severity

CVSS v2 Score 5.8

References

Products affected by CVE-2009-0844

Mit » Kerberos » Version: 5-1.6.3

cpe:2.3:a:mit:kerberos:5-1.6.3
Mit » Kerberos 5 » Version: N/A

cpe:2.3:a:mit:kerberos_5:-
Mit » Kerberos 5 » Version: 1.5

cpe:2.3:a:mit:kerberos_5:1.5
Mit » Kerberos 5 » Version: 1.5.1

cpe:2.3:a:mit:kerberos_5:1.5.1
Mit » Kerberos 5 » Version: 1.5.2

cpe:2.3:a:mit:kerberos_5:1.5.2
Mit » Kerberos 5 » Version: 1.5.3

cpe:2.3:a:mit:kerberos_5:1.5.3
Mit » Kerberos 5 » Version: 1.6

cpe:2.3:a:mit:kerberos_5:1.6
Mit » Kerberos 5 » Version: 1.6.1

cpe:2.3:a:mit:kerberos_5:1.6.1
Mit » Kerberos 5 » Version: 1.6.2

cpe:2.3:a:mit:kerberos_5:1.6.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0844

Products

Pricing

Contact Us