← Database

CVE-2010-0629

MEDIUM CVSS: 6.5 Published: 2010-04-07 Modified: 2026-06-16

Description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Affected Platforms

Canonical Ubuntu LinuxFedoraproject FedoraMit Kerberos 5Opensuse OpensuseSuse Linux Enterprise

Weakness Type

CWE-416

References