CVE-2008-0062
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...
9.8 CriticalFix available
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
10.1%Up 1.9 points since Feb 4, 2022
What each source reports
NVD Score used
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
CVE-2008-0062- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-665
- Updated
- 2026-11-02
CVE List No score
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
CVE-2008-0062- Updated
- 2026-11-02
EUVDEUVD-2008-0075 No score
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
EUVD-2008-0075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6c2-j3p8-vxvv
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
GHSA-f6c2-j3p8-vxvv- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-665
- Updated
- 2026-11-02
OSV
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
CVE-2008-0062- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-0062
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
- Record
DEBIAN-CVE-2008-0062- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:13 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:14 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge6, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge31.3.6-2sarge41.3.6-2sarge5 |
1.3.6-2sarge6 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch5, plus listed versions 1.4.4-7etch11.4.4-7etch21.4.4-7etch31.4.4-7etch4 |
1.4.4-7etch5 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
Show 90 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-develRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-libsRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-serverRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-workstationRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5Red Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-develRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-libsRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-serverRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-workstationRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0062 is a critical vulnerability (CVSS 9.8) in Mit Kerberos 5, published March 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. Fixed in krb5 1.6.dfsg.3~beta1-4.
References
vupen.com/english/advisories/2008/1744
secunia.com/advisories/29457
mandriva.com/security/advisories?name=MDVSA-2008:069
gentoo.org/security/en/glsa/glsa-200803-31.xml
redhat.com/archives/fedora-package-announce/2008-March/msg00537.html
Show 102 moreShow less
wiki.rpath.com/Advisories:rPSA-2008-0112
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
marc.info?l=bugtraq&m=130497213107107&w=2
vmware.com/security/advisories/VMSA-2008-0009.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496
exchange.xforce.ibmcloud.com/vulnerabilities/41275
securitytracker.com/id?1019626
securityfocus.com/archive/1/489883/100/0/threaded
debian.org/security/2008/dsa-1524
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html
docs.info.apple.com/article.html?artnum=307562
ubuntu.com/usn/usn-587-1
web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
kb.cert.org/vuls/id/895609
nvd.nist.gov/vuln/detail/CVE-2008-0062
github.com/advisories/GHSA-f6c2-j3p8-vxvv
security-tracker.debian.org/tracker/CVE-2008-0062
access.redhat.com/errata/RHSA-2008:0164
bugzilla.redhat.com/show_bug.cgi?id=415321
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json
cve.org/CVERecord?id=CVE-2007-5901
suse.com/security/cve/CVE-2006-6143