CVE-2008-0947

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-19 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.

Affected products

MIT Kerberos 5: 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.5 (+7)

References

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html
http://marc.info/?l=bugtraq&m=130497213107107&w=2
http://secunia.com/advisories/29424
http://secunia.com/advisories/29428
http://secunia.com/advisories/29435
http://secunia.com/advisories/29438
http://secunia.com/advisories/29451
http://secunia.com/advisories/29457
http://secunia.com/advisories/29462
http://secunia.com/advisories/29464
http://secunia.com/advisories/29516
http://secunia.com/advisories/29663

Get alerted when CVE-2008-0947 or the next vulnerability affects your stack