Every CVE Search/ Get API key

CVE-2011-1527

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...

7.8 HighFix available

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Exploit likelihood

3.65%Up 2.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
CVE-2011-1527
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
CVE-2011-1527
Updated
2026-11-02
EUVDEUVD-2011-1528 No score

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
EUVD-2011-1528
Updated
2026-11-03
GitHub AdvisoriesGHSA-848m-2rw5-f2f2 No score

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
GHSA-848m-2rw5-f2f2
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
CVE-2011-1527
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1527 No score

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Record
DEBIAN-CVE-2011-1527
Updated
2026-11-02
OSVopenSUSE-SU-2024:10004-1 No score

krb5-1.15-1.1 on GA media

These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10004-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Debian:12
 before 1.10+dfsg~alpha1-1
1.10+dfsg~alpha1-1
krb5
Debian:13
 before 1.10+dfsg~alpha1-1
1.10+dfsg~alpha1-1
krb5
Debian:14
 before 1.10+dfsg~alpha1-1
1.10+dfsg~alpha1-1
krb5
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-devel
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-libs
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-pkinit-openssl
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-server
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-server-ldap
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5-workstation
Red Hat:enterprise_linux:6::server
 before 0:1.9-9.el6_1.2
0:1.9-9.el6_1.2
krb5
openSUSE:Tumbleweed
 before 1.15-1.1
1.15-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1527 is a high vulnerability (CVSS 7.8) in Mit Kerberos 5, published October 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.65%, the 89th percentile. Fixed in krb5 1.10+dfsg~alpha1-1.

References

Show 68 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open