CVE-2010-0629

MEDIUM

MIT Kerberos 5 1.5-1.6.3 - Authenticated Denial of Service via Invalid API Version Number

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

References (19)

Core 19
Core References
Vendor Advisory x_refsource_confirm
http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998
Mailing List vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2031
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0876
Broken Link, Patch, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/39247
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023821
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39324
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39367
Patch, Vendor Advisory x_refsource_confirm
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39290
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0343.html
Exploit, Issue Tracking, Mailing List x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-924-1
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39264
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:071
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/510566/100/0/threaded
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39315

Scores

CVSS v3 6.5
EPSS 0.0228
EPSS Percentile 84.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-416
Status published
Products (8)
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
canonical/ubuntu_linux 9.04
fedoraproject/fedora 11
mit/kerberos_5 1.5 - 1.6.3
opensuse/opensuse 11.0
opensuse/opensuse 11.1
suse/linux_enterprise 11.0
Published Apr 07, 2010
Tracked Since Feb 18, 2026