CVE-2010-0629
- State
- Published
- Severity
- Not scored
- Published
- Apr 7, 2010
- Updated
- Aug 7, 2024
- Reserved
- Feb 12, 2010
Description
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998
- DSA-2031vendor-advisory
- ADV-2010-0876vdb-entry
- 39247vdb-entry
- 1023821vdb-entry
- 39324third-party-advisory
- 39367third-party-advisory
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt
- SUSE-SR:2010:009vendor-advisory
- 39290third-party-advisory
- FEDORA-2010-6108vendor-advisory
- RHSA-2010:0343vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
- USN-924-1vendor-advisory
- oval:org.mitre.oval:def:9489vdb-entrysignature
- 39264third-party-advisory
- MDVSA-2010:071vendor-advisory
- 20100406 MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releasesmailing-list
- 39315third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.