CVE-2008-0063
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...
7.5 HighFix available
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
3.48%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
CVE-2008-0063- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-908
- Updated
- 2026-11-02
CVE List No score
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
CVE-2008-0063- Updated
- 2026-11-02
EUVDEUVD-2008-0076 No score
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
EUVD-2008-0076- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-67px-r9v8-hcfg
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
GHSA-67px-r9v8-hcfg- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-119, CWE-908
- Updated
- 2026-11-02
OSV
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
CVE-2008-0063- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-0063
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
- Record
DEBIAN-CVE-2008-0063- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:13 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:14 |
before 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge6, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge31.3.6-2sarge41.3.6-2sarge5 |
1.3.6-2sarge6 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch5, plus listed versions 1.4.4-7etch11.4.4-7etch21.4.4-7etch31.4.4-7etch4 |
1.4.4-7etch5 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:1.6.1-17.el5_1.1 | 0:1.6.1-17.el5_1.1 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-54.el4_6.1 | 0:1.3.4-54.el4_6.1 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-48 | 0:1.2.2-48 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-68 | 0:1.2.7-68 |
krb5Red Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-debuginfoRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-develRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-libsRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-serverRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-workstationRed Hat:rhel_eus:4.5::as From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5Red Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-debuginfoRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-develRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-libsRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-serverRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
krb5-workstationRed Hat:rhel_eus:4.5::es From an advisory covering 2 CVEs |
before 0:1.3.4-49.el4_5.1 | 0:1.3.4-49.el4_5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0063 is a high vulnerability (CVSS 7.5) in Mit Kerberos 5, published March 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. Fixed in krb5 1.6.dfsg.3~beta1-4.
References
vupen.com/english/advisories/2008/1744
secunia.com/advisories/29457
mandriva.com/security/advisories?name=MDVSA-2008:069
gentoo.org/security/en/glsa/glsa-200803-31.xml
exchange.xforce.ibmcloud.com/vulnerabilities/41277
Show 80 moreShow less
redhat.com/archives/fedora-package-announce/2008-March/msg00537.html
wiki.rpath.com/Advisories:rPSA-2008-0112
securitytracker.com/id?1019627
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
vmware.com/security/advisories/VMSA-2008-0009.html
securityfocus.com/archive/1/489883/100/0/threaded
debian.org/security/2008/dsa-1524
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8916
lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html
docs.info.apple.com/article.html?artnum=307562
ubuntu.com/usn/usn-587-1
web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
nvd.nist.gov/vuln/detail/CVE-2008-0063
github.com/advisories/GHSA-67px-r9v8-hcfg
security-tracker.debian.org/tracker/CVE-2008-0063
access.redhat.com/errata/RHSA-2008:0164
bugzilla.redhat.com/show_bug.cgi?id=415321
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json
cve.org/CVERecord?id=CVE-2007-5901