CVE-2006-6143 json
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other produ…
published 2006-12-31 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-6126
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 8.2%
- EPSS 8.2% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Patch / fix
- krb5 Debian 14, Debian 13, Debian 12 1.4.4-6
debian advisories DEBIAN-CVE-2006-6143
- krb5 openSUSE Tumbleweed 1.19.2-2.2
opensuse advisories openSUSE-SU-2024:10899-1
Exploit prediction
8.21% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-824 Access of Uninitialized Pointer
References
-
kb.cert.org
/vuls/id/481564
third-party-advisory, patch, us-government-resource
-
us-cert.gov
/cas/techalerts/TA07-009B.html
third-party-advisory, broken-link, patch, us-government-resource
-
web.mit.edu
/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt
patch, vendor-advisory
-
fedoranews.org
/cms/node/2376
vendor-advisory, broken-link
-
ubuntu.com
/usn/usn-408-1
vendor-advisory, third-party-advisory
-
lists.suse.com
/archive/suse-security-announce/2007-Jan/0004.html
vendor-advisory, broken-link
-
mandriva.com
/security/advisories?name=MDKSA-2007:008
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/glsa-200701-21.xml
vendor-advisory, third-party-advisory
-
openpkg.com
/security/advisories/OpenPKG-SA-2007.006.html
vendor-advisory, broken-link
-
fedoranews.org
/cms/node/2375
vendor-advisory, broken-link
-
lists.apple.com
/archives/Security-announce/2007/Apr/msg00001.html
vendor-advisory, mailing-list
-
securitytracker.com
/id?1017493
vdb-entry, broken-link, third-party-advisory
-
osvdb.org
/31281
vdb-entry, broken-link
-
secunia.com
/advisories/24966
third-party-advisory, broken-link
-
secunia.com
/advisories/23696
third-party-advisory, broken-link
-
docs.info.apple.com
/article.html?artnum=305391
broken-link
-
secunia.com
/advisories/23706
third-party-advisory, broken-link
-
secunia.com
/advisories/23903
third-party-advisory, broken-link
-
securityfocus.com
/bid/21970
vdb-entry, broken-link, third-party-advisory
-
secunia.com
/advisories/23667
third-party-advisory, broken-link
-
us-cert.gov
/cas/techalerts/TA07-109A.html
third-party-advisory, broken-link, us-government-resource
-
issues.rpath.com
/browse/RPL-925
broken-link
-
secunia.com
/advisories/23707
third-party-advisory, broken-link
-
vupen.com
/english/advisories/2007/0111
vdb-entry, broken-link
-
securityfocus.com
/archive/1/456406/100/0/threaded
mailing-list, broken-link, third-party-advisory, vdb-entry
-
secunia.com
/advisories/23772
third-party-advisory, broken-link
-
secunia.com
/advisories/23701
third-party-advisory, broken-link
-
vupen.com
/english/advisories/2007/1470
vdb-entry, broken-link
-
exchange.xforce.ibmcloud.com
/vulnerabilities/31422
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2006-6143
- NVD CVE-2006-6143
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.