What is the CVSS score of CVE-2013-1417?

CVE-2013-1417 has a CVSS 2.0 base score of 3.5 (Low). CVSS vector: AV:N/AC:M/Au:S/C:N/I:N/A:P. EPSS exploitation probability: 0.5%.

Is there a public PoC exploit available for CVE-2013-1417?

Yes, a public proof-of-concept exploit is available for CVE-2013-1417. Prioritise patching immediately. EPSS: 0.5%.

Is there a patch available for CVE-2013-1417?

Yes, a patch is available for CVE-2013-1417. Update the affected software to the latest version immediately.

Kerberos 5 CVE-2013-1417

LOW

Improper Input Validation (CWE-20)

2013-11-20 cve@mitre.org

Denial Of Service Kerberos 5

3.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.5 LOW

AV:N/AC:M/Au:S/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Nov 20, 2013 - 14:12 cve.org

LOW 3.5

DescriptionCVE.org

do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.

AnalysisAI

do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-20. do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal. Affected products include: Mit Kerberos 5. Version information: before 1.11.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.