CVE-2013-1415: The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implemen...

Security readout for executives and security teams

This is a remote denial-of-service issue in MIT Kerberos 5 KDC PKINIT handling. A malformed authentication request can crash the KDC daemon, potentially disrupting Kerberos authentication for dependent systems. The source bundle does not report active exploitation. Exposure is most likely where MIT Kerberos 5 KDC uses vulnerable krb5 versions with PKINIT enabled. The bundle does not identify other affected products, complete CPEs, or downstream package version mappings beyond referenced vendor advisories. Treat as a service availability risk for Kerberos-backed environments. It is not reported as actively exploited, but a KDC crash can interrupt logins and dependent services, so remediation belongs in normal security maintenance with higher urgency for critical KDCs. Mitigation focus: Upgrade MIT krb5 to 1.10.4, 1.11.1, or later supported releases.; Apply vendor security updates from the relevant Linux distribution or Kerberos package source.; Review MIT and distribution advisories for any PKINIT-specific operational guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.