CVE-2010-0629

krb5: kadmind use-after-free remote crash (MITKRB5-SA-2010-003)

Published Apr 7, 2010 CVSS 3.1 · 6.5 Medium EPSS 5.5% KEV · Not listed
Description
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2031-1 New krb5 packages fix denial of service
Ubuntu USN Ubuntu USN USN-924-1 Kerberos vulnerabilities
History

No history.