CVE-2012-1013: The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x...

Security readout for executives and security teams

This vulnerability can let a logged-in Kerberos administrator crash the Kerberos administration daemon. It is not described as allowing data theft or privilege escalation, but an outage in kadmind can disrupt identity administration, password/key management, and operational recovery tasks. Exposure is limited to environments running affected MIT krb5 kadmind versions where authenticated Kerberos administrators can reach the admin service. Systems on vendor-maintained packages may already have received 2012-era fixes. Prioritize for identity infrastructure still running old Kerberos packages. The issue is not broadly wormable, but a Kerberos administration outage can delay account recovery, password changes, and key management during incidents. Mitigation focus: Upgrade MIT krb5 to 1.10.2 or later where applicable.; Apply vendor Kerberos security updates from your operating system provider.; Restrict kadmind network access to trusted administrative hosts only..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.