Candidate: CVE-2011-4151 PublicDate: 2011-10-20 21:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4151 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt https://ubuntu.com/security/notices/USN-1233-1 Description: The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, a different vulnerability than CVE-2011-1528. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: sbeattie CVSS: Patches_krb5: upstream_krb5: pending (1.8.5) hardy_krb5: not-affected lucid_krb5: released (1.8.1+dfsg-2ubuntu0.10) maverick_krb5: released (1.8.1+dfsg-5ubuntu0.8) natty_krb5: released (1.8.3+dfsg-5ubuntu2.2) oneiric_krb5: not-affected (1.9.1+dfsg-1ubuntu1.1) devel_krb5: not-affected