CVE-2005-1689
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...
9.8 CriticalFix available
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
11.0%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
CVE-2005-1689- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE List No score
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
CVE-2005-1689- Updated
- 2026-11-02
EUVDEUVD-2005-1691 No score
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
EUVD-2005-1691- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8mfg-j523-2x92 No score
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
GHSA-8mfg-j523-2x92- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
CVE-2005-1689- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1689
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- Record
DEBIAN-CVE-2005-1689- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.3.6-4 | 1.3.6-4 |
krb5Debian:13 |
before 1.3.6-4 | 1.3.6-4 |
krb5Debian:14 |
before 1.3.6-4 | 1.3.6-4 |
krb5Debian:3.0 From an advisory covering 3 CVEs |
before 1.2.4-5woody10, plus listed versions 1.2.4-5woody61.2.4-5woody71.2.4-5woody8 |
1.2.4-5woody10 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge2, plus listed versions 1.3.6-21.3.6-2sarge1 |
1.3.6-2sarge2 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
Show 43 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.3.4-17 | 0:1.3.4-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1689 is a critical vulnerability (CVSS 9.8) in Mit Kerberos 5, published July 17, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.0%, the 95th percentile. Fixed in krb5 1.3.6-4.
References
securitytracker.com/id?1014461
securityfocus.com/archive/1/446940/100/0/threaded
web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt
gentoo.org/security/en/glsa/glsa-200507-11.xml
redhat.com/support/errata/RHSA-2005-567.html
novell.com/linux/security/advisories/2005_17_sr.html
Show 55 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/21055
sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000993
vupen.com/english/advisories/2006/3776
turbolinux.com/security/2005/TLSA-2005-78.txt
secunia.com/advisories/16041
usn.ubuntu.com/224-1
debian.org/security/2005/dsa-757
lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
kb.cert.org/vuls/id/623332
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9819
marc.info?l=bugtraq&m=112119974704542&w=2
trustix.org/errata/2005/0036
nvd.nist.gov/vuln/detail/CVE-2005-1689
github.com/advisories/GHSA-8mfg-j523-2x92
security-tracker.debian.org/tracker/CVE-2005-1689
access.redhat.com/errata/RHSA-2005:562
bugzilla.redhat.com/show_bug.cgi?id=159304
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_562.json
cve.org/CVERecord?id=CVE-2004-0175