Back to feed
EUVD-2010-0660 · Published Apr 7, 2010
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.
Technologies
Mit Kerberos 5Opensuse OpensuseFedoraproject FedoraCanonical Ubuntu LinuxSuse Linux Enterprise
Weaknesses
CWE-416
CVSS scores
- v3.16.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - v2.04.0
AV:N/AC:L/Au:S/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
- http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
- http://secunia.com/advisories/39264
- http://secunia.com/advisories/39290
Potentially impacted assets
See if this affects your attack surface
