CVE-2010-0629

Опубликовано: 07 апр. 2010

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
Exploit
Issue Tracking
Mailing List
http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
Mailing List
http://secunia.com/advisories/39264
Broken Link
http://secunia.com/advisories/39290
Broken Link
http://secunia.com/advisories/39315
Broken Link
http://secunia.com/advisories/39324
Broken Link
http://secunia.com/advisories/39367
Broken Link
http://securitytracker.com/id?1023821
Broken Link
Third Party Advisory
VDB Entry
http://ubuntu.com/usn/usn-924-1
Third Party Advisory
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt
Patch
Vendor Advisory
http://www.debian.org/security/2010/dsa-2031
Mailing List
http://www.mandriva.com/security/advisories?name=MDVSA-2010:071
Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0343.html
Broken Link
http://www.securityfocus.com/archive/1/510566/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/39247
Broken Link
Patch
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2010/0876
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489
Broken Link
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
Exploit
Issue Tracking
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*

Версия от 1.5 (включая) до 1.6.3 (включая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02284

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2010-0629

CVSS3: 6.5

ubuntu

около 15 лет назад

CVE-2010-0629

redhat

больше 15 лет назад

CVE-2010-0629

CVSS3: 6.5

debian

около 15 лет назад

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmin ...

GHSA-6243-f9c4-77f4

CVSS3: 6.5

github

около 3 лет назад

ELSA-2010-0343

oracle-oval

около 15 лет назад

ELSA-2010-0343: krb5 security and bug fix update (IMPORTANT)

EPSS

Процентиль: 84%

0.02284

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-416