CVE-2003-0072: The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm…

Unscored severity · published Apr 2, 2003

CVE-2003-0072

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm…

–

CVSS

1.9%

EPSS

On KEV

Description

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").

Exploitation

Is it being used?

Exploit prediction (EPSS)1.9% · higher than 80% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kerberos · Mit

1.0; 1.2.2.beta1 · source: NVD

Kerberos 5 · Mit

1.0.6; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2; +6 more · source: NVD