CVE-2010-0629
Fixed in a distro release EPSS 5%
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.
Products: mit kerberos_5, fedoraproject fedora, opensuse, suse linux_enterprise, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.7+dfsg-1 |
| Debian 13 | krb5 | 1.7+dfsg-1 |
| Debian 14 | krb5 | 1.7+dfsg-1 |
| Debian 5.0 | krb5 | 1.6.dfsg.4~beta1-5lenny3 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-36.el5_5.2 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-36.el5_5.2 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-36.el5_5.2 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-36.el5_5.2 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-36.el5_5.2 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-36.el5_5.2 |