CVE-2003-0072: Mit Kerberos

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").

Affected products

• Mit Kerberos: version 1.0 only; version 1.2.2.beta1 only
• Mit Kerberos 5: version 1.0.6 only; version 1.1 only; version 1.1.1 only; version 1.2 only; version 1.2.1 only; version 1.2.2 only; …

Published 2003-04-02. Last modified 2026-06-16.