CVE-2003-0058

Description

MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.

How to fix CVE-2003-0058

To remediate CVE-2003-0058, upgrade the affected package to a fixed version below.

• Debian/krb5—upgrade to 1.2.5-1 or later

Is CVE-2003-0058 being exploited?

Low — EPSS is 4.8%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.2.5-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0058