CVE-2006-6144: Mit Kerberos 5

Medium severity, CVSS 5.0. EPSS: 5.5% chance of exploitation in the next 30 days.

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.

Affected products

• Mit Kerberos 5: from 1.5, up to and including 1.5.1

Published 2006-12-31. Last modified 2026-06-16.