CVE-2010-0629 PUBLISHED CVSS 4 MEDIUM

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

EPSS 2.28% · 84.6th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
2.28%
84.6th percentile

Affected Products

VendorProductVersions
mitkerberos_51.5
opensuseopensuse11.0, 11.1
n/an/an/a
canonicalubuntu_linux8.04, 8.10, 9.04
fedoraprojectfedora11
suselinux_enterprise11.0

Timeline

References

Open in Interactive Console →