Vulnetix
Try Vulnetix Request Demo
CVE-2010-0628 PUBLISHED CVSS 5 MEDIUM

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.

EPSS 0.93% · 75.9th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.93%
75.9th percentile

Affected Products

VendorProductVersions
n/an/an/a
mitkerberos_51.7, 1.7.1, 1.8

Timeline

References

Open in Interactive Console →