{"id":"CVE-2006-6143","aliases":["DEBIAN-CVE-2006-6143","EUVD-2006-6126","GHSA-f6jg-x7x7-48f4","openSUSE-SU-2024:10899-1"],"status":"published","title":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08208,"percentile":0.94918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-824"],"published":"2006-12-31T05:00:00Z","modified":"2026-10-22T23:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.4.4-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.4.4-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.4.4-6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-6"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2.2"}]}],"bundled":20}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"mit","product":"kerberos_5"}],"references":[{"url":"http://securitytracker.com/id?1017493","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://fedoranews.org/cms/node/2376","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","web"]},{"url":"http://osvdb.org/31281","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/24966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/481564","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource","advisory","fix","web"]},{"url":"http://www.ubuntu.com/usn/usn-408-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-009B.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Broken Link","Patch","Third Party Advisory","US Government Resource","advisory","fix","web"]},{"url":"http://secunia.com/advisories/23696","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"http://docs.info.apple.com/article.html?artnum=305391","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/23706","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:008","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/23903","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://www.securityfocus.com/bid/21970","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://secunia.com/advisories/23667","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-21.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred","Broken Link","advisory"]},{"url":"http://fedoranews.org/cms/node/2375","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","web"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-109A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Broken Link","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"https://issues.rpath.com/browse/RPL-925","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/23707","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0111","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","advisory"]},{"url":"http://www.securityfocus.com/archive/1/456406/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://secunia.com/advisories/23772","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://secunia.com/advisories/23701","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","article"]},{"url":"http://www.vupen.com/english/advisories/2007/1470","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31422","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6143"},{"url":"https://github.com/advisories/GHSA-f6jg-x7x7-48f4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6143","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37750","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2006-6143","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2007-01-10T00:00:00Z","modified":"2024-08-07T20:19:34.415Z","updated_at":"2026-11-02T14:33:50.374603Z"}],"euvd":[{"id":"EUVD-2006-6126","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2007-01-10T00:00:00Z","modified":"2024-08-07T20:19:34Z","updated_at":"2026-11-03T01:15:44.814613Z"}],"ghsa":[{"id":"GHSA-f6jg-x7x7-48f4","title":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-01T07:35:12Z","modified":"2024-02-09T03:32:53Z","cwes":["CWE-824"],"updated_at":"2026-11-02T14:55:34.624515Z"}],"nvd":[{"id":"CVE-2006-6143","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2006-12-31T05:00:00Z","modified":"2026-06-16T22:32:33.213Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-824"],"updated_at":"2026-11-02T14:01:10.726159Z"}],"osv":[{"id":"CVE-2006-6143","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2006-12-31T05:00:00Z","modified":"2026-04-10T03:37:52.120498Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2006-6143","description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","status":"published","published":"2006-12-31T05:00:00Z","modified":"2026-10-22T23:47:29.851026698Z","updated_at":"2026-11-02T15:45:23.105674Z"},{"id":"openSUSE-SU-2024:10899-1","title":"krb5-1.19.2-2.2 on GA media","description":"These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:44.135635Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}