cvelist/2011/0xxx/CVE-2011-0284.json
2018-10-10 15:05:20 -04:00

173 lines
5.5 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2011-0284",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "20110315 MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enabled",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/517029/100/0/threaded"
},
{
"name" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-003.txt",
"refsource" : "CONFIRM",
"url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-003.txt"
},
{
"name" : "FEDORA-2011-3462",
"refsource" : "FEDORA",
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056579.html"
},
{
"name" : "FEDORA-2011-3464",
"refsource" : "FEDORA",
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056573.html"
},
{
"name" : "FEDORA-2011-3547",
"refsource" : "FEDORA",
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056413.html"
},
{
"name" : "MDVSA-2011:048",
"refsource" : "MANDRIVA",
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:048"
},
{
"name" : "RHSA-2011:0356",
"refsource" : "REDHAT",
"url" : "http://www.redhat.com/support/errata/RHSA-2011-0356.html"
},
{
"name" : "SUSE-SR:2011:005",
"refsource" : "SUSE",
"url" : "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
},
{
"name" : "USN-1088-1",
"refsource" : "UBUNTU",
"url" : "http://www.ubuntu.com/usn/USN-1088-1"
},
{
"name" : "VU#943220",
"refsource" : "CERT-VN",
"url" : "http://www.kb.cert.org/vuls/id/943220"
},
{
"name" : "46881",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/46881"
},
{
"name" : "71183",
"refsource" : "OSVDB",
"url" : "http://osvdb.org/71183"
},
{
"name" : "1025216",
"refsource" : "SECTRACK",
"url" : "http://securitytracker.com/id?1025216"
},
{
"name" : "43783",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/43783"
},
{
"name" : "43700",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/43700"
},
{
"name" : "43760",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/43760"
},
{
"name" : "43881",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/43881"
},
{
"name" : "ADV-2011-0672",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0672"
},
{
"name" : "ADV-2011-0673",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0673"
},
{
"name" : "ADV-2011-0680",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0680"
},
{
"name" : "ADV-2011-0722",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0722"
},
{
"name" : "ADV-2011-0763",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0763"
},
{
"name" : "kerberos-perpareerroras-code-execution(66101)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/66101"
}
]
}
}