CVE-2017-11462

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A double free vulnerability in MIT Kerberos 5 (krb5) allows attackers to have unspecified impact via automatic deletion of security contexts on error.

Risk Assessment

Organizations may be exposed to unauthorized access or other unforeseen security consequences.

Recommendation

It is recommended to upgrade to the latest version of MIT Kerberos 5 to mitigate this vulnerability.

Original NVD description (English source)

Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.