CVE-2006-6143
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-824
- Updated
- 2026-11-02
CVE List No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- Updated
- 2026-11-02
EUVDEUVD-2006-6126 No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
EUVD-2006-6126- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6jg-x7x7-48f4 No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
GHSA-f6jg-x7x7-48f4- Weakness
- CWE-824
- Updated
- 2026-11-02
OSV No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6143 No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
DEBIAN-CVE-2006-6143- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6143 is a high vulnerability (CVSS 9.3) in Mit Kerberos 5, published December 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.21%, the 94th percentile. Fixed in krb5 1.4.4-6.
References
securitytracker.com/id?1017493
fedoranews.org/cms/node/2376
osvdb.org/31281
secunia.com/advisories/24966
kb.cert.org/vuls/id/481564
ubuntu.com/usn/usn-408-1
Show 46 moreShow less
us-cert.gov/cas/techalerts/TA07-009B.html
lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html
docs.info.apple.com/article.html?artnum=305391
mandriva.com/security/advisories?name=MDKSA-2007:008
securityfocus.com/bid/21970
security.gentoo.org/glsa/glsa-200701-21.xml
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt
openpkg.com/security/advisories/OpenPKG-SA-2007.006.html
issues.rpath.com/browse/RPL-925
vupen.com/english/advisories/2007/0111
lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
exchange.xforce.ibmcloud.com/vulnerabilities/31422
nvd.nist.gov/vuln/detail/CVE-2006-6143
github.com/advisories/GHSA-f6jg-x7x7-48f4
security-tracker.debian.org/tracker/CVE-2006-6143
suse.com/security/cve/CVE-2006-6143