CVE-2010-0629

Published: Apr 7, 2010Modified: Apr 29, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Affected (8)

Products: Mit: Kerberos 5 · Fedoraproject: Fedora · Opensuse: Opensuse · +2 more

Show all products

Mit: Kerberos 5 · Fedoraproject: Fedora · Opensuse: Opensuse · Suse: Linux Enterprise · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	From 1.5 to 1.6.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 11

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise	Version 11.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052

Source: cve@mitre.org

ExploitIssue TrackingMailing List

http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998

Source: cve@mitre.org

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html

Source: cve@mitre.org

Mailing List

http://secunia.com/advisories/39264

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/39290

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/39315

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/39324

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/39367

Source: cve@mitre.org

Broken Link

http://securitytracker.com/id?1023821

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://ubuntu.com/usn/usn-924-1

Source: cve@mitre.org

Third Party Advisory

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2010/dsa-2031

Source: cve@mitre.org

Mailing List

http://www.mandriva.com/security/advisories?name=MDVSA-2010:071

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0343.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/510566/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/39247

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2010/0876

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489

Source: cve@mitre.org

Broken Link

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052