{"id":"CVE-2002-2443","aliases":["DEBIAN-CVE-2002-2443","DSA-2701-1","EUVD-2002-2421","GHSA-cqf2-6q6w-6cqw","MGASA-2013-0161","RHSA-2013:0942","UBUNTU-CVE-2002-2443","USN-2810-1","openSUSE-SU-2024:10004-1"],"status":"published","title":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.06183,"percentile":0.93532,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2013-05-10T00:00:00Z","modified":"2026-10-22T23:47:23Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.10.1+dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.10.1+dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.10.1+dfsg-6"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"krb5","fixed_in":["1.8.3+dfsg-4squeeze7"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"krb5","fixed_in":["1.10.1+dfsg-5+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"krb5","fixed_in":["1.9.2-2.6.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"krb5","fixed_in":["1.11.1-1.2.mga3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-debuginfo","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-devel","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-libs","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-server","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-server-ldap","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-workstation","fixed_in":["0:1.6.1-70.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-debuginfo","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-libs","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-pkinit-openssl","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-workstation","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-devel","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server-ldap","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-debuginfo","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-libs","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-pkinit-openssl","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-workstation","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-devel","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server-ldap","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-debuginfo","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-devel","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-libs","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-pkinit-openssl","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server-ldap","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-workstation","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-debuginfo","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-devel","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-libs","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-pkinit-openssl","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server-ldap","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-workstation","fixed_in":["0:1.10.3-10.el6_4.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-4squeeze7"}]}],"versions":["1.8.3+dfsg-4","1.8.3+dfsg-4squeeze1","1.8.3+dfsg-4squeeze2","1.8.3+dfsg-4squeeze5","1.8.3+dfsg-4squeeze6"]},{"source":"osv","ecosystem":"Debian:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1+dfsg-5+deb7u1"}]}],"versions":["1.10.1+dfsg-5"]},{"source":"osv","ecosystem":"Mageia:2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-2.6.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-1.2.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-70.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.3-10.el6_4.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1.1"}]}],"bundled":54}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mit","product":"kerberos_5"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106698.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.debian.org/security/2013/dsa-2701","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/krb5/krb5/commit/cf1a0c411b2668c57c41e9c4efd15ba17b6b322c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?id=7637","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105978.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105879.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0942.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962531","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.ubuntu.com/usn/USN-2810-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:166","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-2443","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cqf2-6q6w-6cqw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2002-2443","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0161.html","tags":["advisory"]},{"url":"http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2013:166/","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0942","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0942.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2002-2443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-2443","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2002-2443","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2810-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-5355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2698","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3120","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2002-2443","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2013-05-29T10:00:00Z","modified":"2024-08-08T04:06:54.807Z","updated_at":"2026-11-02T14:33:54.29664Z"}],"euvd":[{"id":"EUVD-2002-2421","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2013-05-29T10:00:00Z","modified":"2024-08-08T04:06:54Z","updated_at":"2026-11-03T01:14:53.392551Z"}],"ghsa":[{"id":"GHSA-cqf2-6q6w-6cqw","title":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2022-04-30T18:23:12Z","modified":"2023-01-30T05:06:03Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:47:24.901969Z"}],"nvd":[{"id":"CVE-2002-2443","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2013-05-29T14:29:06.287Z","modified":"2026-06-16T22:01:18.547Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:00:44.251133Z"}],"osv":[{"id":"CVE-2002-2443","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2013-05-29T14:29:06Z","modified":"2026-04-16T06:20:39.435238079Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"DEBIAN-CVE-2002-2443","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"published","published":"2013-05-29T14:29:06.287Z","modified":"2026-10-22T23:47:23.503624261Z","updated_at":"2026-11-02T15:45:22.248131Z"},{"id":"DSA-2701-1","title":"krb5 - denial of service","status":"published","published":"2013-06-02T00:00:00Z","modified":"2026-03-09T01:22:26.234277Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0161","title":"Updated krb5 packages fix security vulnerability","description":"The kpasswd service provided by kadmind was vulnerable to a UDP\nping-pong attack (CVE-2002-2443).\n","status":"published","published":"2013-06-06T12:24:33Z","modified":"2026-04-16T06:23:01.073301522Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10004-1","title":"krb5-1.15-1.1 on GA media","description":"These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:07.629761Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2013:0942","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2024-09-12T22:07:53Z","modified":"2026-06-26T12:20:53.623589024Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2002-2443","description":"schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.","status":"withdrawn","published":"2013-05-10T00:00:00Z","modified":"2026-02-04T02:46:27.155622Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-2810-1","title":"krb5 vulnerabilities","description":"It was discovered that the Kerberos kpasswd service incorrectly handled\ncertain UDP packets. A remote attacker could possibly use this issue to\ncause resource consumption, resulting in a denial of service. This issue\nonly affected Ubuntu 12.04 LTS. (CVE-2002-2443)\n\nIt was discovered that Kerberos incorrectly handled null bytes in certain\ndata fields. A remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu\n14.04 LTS. (CVE-2014-5355)\n\nIt was discovered that the Kerberos kdcpreauth modules incorrectly tracked\ncertain client requests. A remote attacker could possibly use this issue\nto bypass intended preauthentication requirements. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-2694)\n\nIt was discovered that Kerberos incorrectly handled certain SPNEGO packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2695)\n\nIt was discovered that Kerberos incorrectly handled certain IAKERB packets.\nA remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2015-2696, CVE-2015-2698)\n\nIt was discovered that Kerberos incorrectly handled certain TGS requests. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2015-2697)\n","status":"published","published":"2015-11-12T17:50:55Z","modified":"2026-04-22T09:18:36.934079Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}