Product
A vulnerability in MIT Kerberos 5 (krb5) versions 1.11 and later allows remote, unauthenticated attackers to cause a denial of service on a Key Distribution Center (KDC) via excessive CPU consumption.