CVE-2012-1013: Mit Kerberos 5

Medium severity, CVSS 4.0. EPSS: 3.1% chance of exploitation in the next 30 days.

The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.

Affected products

• Mit Kerberos 5: version 1.8 only; version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; version 1.8.4 only; version 1.8.5 only; …

Published 2012-06-07. Last modified 2026-06-16.