CVE-2011-4151

MIT Kerberos 5 1.8-1.8.4 - Denial of Service via KDC Lockout Audit Function

Title source: llm
STIX 2.1

Description

The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528.

References (3)

Core 3
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/659251
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/70891

Scores

EPSS 0.0120
EPSS Percentile 79.2%

Details

CWE
CWE-20
Status published
Products (5)
mit/kerberos_5 1.8
mit/kerberos_5 1.8.1
mit/kerberos_5 1.8.2
mit/kerberos_5 1.8.3
mit/kerberos_5 1.8.4
Published Oct 20, 2011
Tracked Since Feb 18, 2026