Every CVE Search/ Get API key

CVE-2011-0285

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...

10.0 HighPublic exploitFix available

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Exploit likelihood

20.8%Down 16.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
CVE-2011-0285
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
CVE-2011-0285
Updated
2026-11-02
EUVDEUVD-2011-0311 No score

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
EUVD-2011-0311
Updated
2026-11-03
GitHub AdvisoriesGHSA-rh86-pqp5-j43v No score

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
GHSA-rh86-pqp5-j43v
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
CVE-2011-0285
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0285 No score

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Record
DEBIAN-CVE-2011-0285
Updated
2026-11-02
OSVopenSUSE-SU-2024:10004-1 No score

krb5-1.15-1.1 on GA media

These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10004-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Debian:12
 before 1.9.1+dfsg-1
1.9.1+dfsg-1
krb5
Debian:13
 before 1.9.1+dfsg-1
1.9.1+dfsg-1
krb5
Debian:14
 before 1.9.1+dfsg-1
1.9.1+dfsg-1
krb5
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-devel
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server-ldap
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-libs
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
Show 26 moreShow less
Affected packages
PackageAffectedFixed
krb5-workstation
Red Hat:enterprise_linux:6::client
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server-ldap
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-workstation
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-libs
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-devel
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-libs
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server-ldap
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-workstation
Red Hat:enterprise_linux:6::server
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-libs
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-server-ldap
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5-workstation
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.2-3.el6_0.7
0:1.8.2-3.el6_0.7
krb5
openSUSE:Tumbleweed
From an advisory covering 54 CVEs
 before 1.15-1.1
1.15-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution2011-04-11

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0285 is a high vulnerability (CVSS 10.0) in Mit Kerberos 5, published April 15, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 20.8%, the 97th percentile. Fixed in krb5 1.9.1+dfsg-1.

References

Show 75 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open