Every CVESearch/Get API key

CVE-2013-6800

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos...

4.0 Medium

CVE-2013-6800 is a medium vulnerability (CVSS 4.0) in Mit Kerberos, published November 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. No source names a fixed version.

What does this mean?
Severity
4.0 MediumCVSS 2.0, NVD
Exploit chance
2.61%EPSS, 85th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Exploit likelihood

2.61%Up 1.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-server
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-server-ldap
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-workstation
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
Show 39 moreShow less
Affected packages
PackageAffectedFixed
krb5-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-server
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-server-ldap
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-workstation
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:1.6.1-78.el5
0:1.6.1-78.el5
krb5-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-workstation
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-workstation
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-workstation
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-server-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5-workstation
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
before 0:1.10.3-33.el6
0:1.10.3-33.el6
krb5
Ubuntu:14.04:LTS
From an advisory covering 9 CVEs
before 1.12+dfsg-2ubuntu4.2, plus listed versions
1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu31.12+dfsg-2ubuntu4
1.12+dfsg-2ubuntu4.2

What each source reports

NVD Score used4.0

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Record
CVE-2013-6800
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Record
CVE-2013-6800
Updated
2026-11-02
EUVDEUVD-2013-6602No score

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Record
EUVD-2013-6602
Updated
2026-11-03
GitHub AdvisoriesGHSA-f64v-2v58-4rrxNo score

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos...

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Record
GHSA-f64v-2v58-4rrx
Updated
2026-11-02
OSVUBUNTU-CVE-2013-6800No score

An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418.

Record
UBUNTU-CVE-2013-6800
Updated
2026-11-02
OSVUSN-2310-1No score

krb5 vulnerabilities

It was discovered that Kerberos incorrectly handled certain crafted Draft 9 requests. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-1016)

It was discovered that Kerberos incorrectly handled certain malformed KRB5_PADATA_PK_AS_REQ AS-REQ requests. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (CVE-2013-1415)

It was discovered that Kerberos incorrectly handled certain crafted TGS-REQ requests. A remote authenticated attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (CVE-2013-1416)

It was discovered that Kerberos incorrectly handled certain crafted requests when multiple realms were configured. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (CVE-2013-1418, CVE-2013-6800)

It was discovered that Kerberos incorrectly handled certain invalid tokens. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be used to cause the daemon to crash, resulting in a denial of service. (CVE-2014-4341, CVE-2014-4342)

It was discovered that Kerberos incorrectly handled certain mechanisms when used with SPNEGO. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be used to cause clients to crash, resulting in a denial of service. (CVE-2014-4343)

It was discovered that Kerberos incorrectly handled certain continuation tokens during SPNEGO negotiations. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. (CVE-2014-4344)

Tomas Kuthan and Greg Hudson discovered that the Kerberos kadmind daemon incorrectly handled buffers when used with the LDAP backend. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-4345)

Record
USN-2310-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 49 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open