CVE-2006-6143
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...
CVE-2006-6143 is a high vulnerability (CVSS 9.3) in Mit Kerberos 5, published December 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.21%, the 94th percentile. Fixed in krb5 1.4.4-6.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 8.21%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.4.4-6krb5 +3 more
Description
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-824
- Updated
- 2026-11-02
CVE ListNo score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- Updated
- 2026-11-02
EUVDEUVD-2006-6126No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
EUVD-2006-6126- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6jg-x7x7-48f4No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
GHSA-f6jg-x7x7-48f4- Weakness
- CWE-824
- Updated
- 2026-11-02
OSVNo score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
CVE-2006-6143- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6143No score
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- Record
DEBIAN-CVE-2006-6143- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1017493
fedoranews.org/cms/node/2376
osvdb.org/31281
secunia.com/advisories/24966
kb.cert.org/vuls/id/481564
ubuntu.com/usn/usn-408-1
Show 46 moreShow less
us-cert.gov/cas/techalerts/TA07-009B.html
lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html
docs.info.apple.com/article.html?artnum=305391
mandriva.com/security/advisories?name=MDKSA-2007:008
securityfocus.com/bid/21970
security.gentoo.org/glsa/glsa-200701-21.xml
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt
openpkg.com/security/advisories/OpenPKG-SA-2007.006.html
issues.rpath.com/browse/RPL-925
vupen.com/english/advisories/2007/0111
lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
exchange.xforce.ibmcloud.com/vulnerabilities/31422
nvd.nist.gov/vuln/detail/CVE-2006-6143
github.com/advisories/GHSA-f6jg-x7x7-48f4
security-tracker.debian.org/tracker/CVE-2006-6143
suse.com/security/cve/CVE-2006-6143