CVE-2010-0629 | Vulnetix

CVE-2010-0629 PUBLISHED CVSS 6.5 MEDIUM

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

EPSS 5.47% · 92.4th percentile

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

5.47%

92.4th percentile

Affected Products

Vendor	Product	Versions
mit	kerberos_5	1.5
opensuse	opensuse	11.0, 11.1
n/a	n/a	n/a
canonical	ubuntu_linux	9.04, 8.04, 8.10
fedoraproject	fedora	11
suse	linux_enterprise	11.0

Timeline

Apr 7, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 21, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Dec 19, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 4, 2023 EPSS Score
Jul 18, 2023 EPSS Score
Sep 9, 2023 EPSS Score

References

http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 url
ADV-2010-0876 vdb
1023821 vdb
39324 third-party-advisory
39367 third-party-advisory
SUSE-SR:2010:009 vendor-advisory
MDVSA-2010:071 vendor-advisory
FEDORA-2010-6108 vendor-advisory
20100406 MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2010-0629 advisory
http://secunia.com/advisories/39264 url
http://www.redhat.com/support/errata/RHSA-2010-0343.html url
http://www.securityfocus.com/bid/39247 url
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 exploit
http://www.debian.org/security/2010/dsa-2031 mailing_list
http://secunia.com/advisories/39290 technical
http://secunia.com/advisories/39315 technical
http://ubuntu.com/usn/usn-924-1 advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489 technical

Open in Interactive Console →