CVE-2011-0282: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is u...

Security readout for executives and security teams

CVE-2011-0282 can let a remote attacker crash an MIT Kerberos KDC when the KDC uses an LDAP backend. Because KDCs support authentication, a crash can disrupt logins and service access. Exposure is limited to MIT krb5 1.6.x through 1.9 in that configuration. Likely exposure is Kerberos infrastructure running MIT krb5 1.6.x through 1.9 with LDAP as the KDC backend. Systems using other KDC backends are not identified as affected in the supplied description. Downstream vendor advisories indicate packaged deployments may also need vendor-specific checks. Treat as a targeted availability risk to identity infrastructure. It is not documented here as actively exploited, but affected KDCs can disrupt broad business access if crashed. Prioritize systems using LDAP-backed MIT Kerberos KDCs, especially where authentication redundancy is weak. Mitigation focus: Inventory MIT krb5 KDC versions and identify LDAP-backed KDCs.; Apply MIT Kerberos or operating-system vendor security updates for this CVE.; Review Red Hat, Mandriva, SUSE, VMware, or platform-specific advisories where applicable..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.