CVE-2011-0284: Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (K...

Security readout for executives and security teams

A flaw in MIT Kerberos KDC could let a remote attacker crash the authentication service when PKINIT is enabled. Because Kerberos often supports core login flows, a KDC outage can disrupt business access. Sources also mention possible arbitrary code execution, but the bundle does not establish practical exploitability. Likely exposure is MIT Kerberos 5 KDC deployments running versions 1.7 through 1.9 with PKINIT enabled. Distro-packaged Kerberos should be checked against vendor advisories. The source bundle does not identify non-MIT Kerberos products as affected. Prioritize remediation where Kerberos KDCs are central to workforce or service authentication, especially if PKINIT is enabled. Even without confirmed active exploitation, a remote KDC crash can create broad login disruption, and sources note possible code execution. Mitigation focus: Apply MIT Kerberos or operating system vendor security updates for this CVE.; If updates are pending, review whether PKINIT is required and follow vendor guidance.; Restrict network access to KDC services to trusted clients where operationally feasible..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.