CVE-2011-1529

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.

• CWE-20

• http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txtVendor Advisory
• http://www.kb.cert.org/vuls/id/659251US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:159
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:160
• http://www.redhat.com/support/errata/RHSA-2011-1379.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txtVendor Advisory
• http://www.kb.cert.org/vuls/id/659251US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:159
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:160
• http://www.redhat.com/support/errata/RHSA-2011-1379.htmlVendor Advisory

Published

Oct 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1523Cross-site scripting (XSS) vulnerability in statusmap.c in s…
• CVE-2011-1524Cross-site scripting (XSS) vulnerability in the management l…
• CVE-2011-1525Heap-based buffer overflow in rvrender.dll in RealNetworks R…
• CVE-2011-1526ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 A…
• CVE-2011-1527The kdb_ldap plugin in the Key Distribution Center (KDC) in …
• CVE-2011-1528The krb5_ldap_lockout_audit function in the Key Distribution…
• CVE-2011-1530The process_tgs_req function in do_tgs_req.c in the Key Dist…
• CVE-2011-1531The webscan component in the Embedded Web Server (EWS) on th…
• CVE-2011-1532Unspecified vulnerability in the SNMP component on the HP Ph…
• CVE-2011-1533Cross-site scripting (XSS) vulnerability on the HP Photosmar…
• CVE-2011-1534Unspecified vulnerability in HP Network Node Manager i (NNMi…
• CVE-2011-1535Unspecified vulnerability in HP Insight Control for Linux (a…