Debian/krb5: critical 9.8

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via c

Action: Upgrade krb5 to 1.6.dfsg.3~beta1-4 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0062#Debian:14/krb5
• https://security-tracker.debian.org/tracker/CVE-2008-0062

published 2008-03-19T10:44:00Z · modified 2026-10-23T18:00:03.039348950Z · JSON