CVE-2010-0629: Use After Free
Use-after-free vulnerability in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0629?
CVE-2010-0629 has a moderate severity level as it allows remote authenticated users to crash the kadmind daemon.
How do I fix CVE-2010-0629?
You can fix CVE-2010-0629 by upgrading to a patched version of MIT Kerberos 5, specifically versions 1.6.4 or later.
Who is affected by CVE-2010-0629?
CVE-2010-0629 affects users of MIT Kerberos 5 versions 1.5 through 1.6.3 and specific Linux distributions that utilize these versions.
What are the consequences of the CVE-2010-0629 vulnerability?
The consequences of CVE-2010-0629 include a denial of service condition due to the crashing of the kadmind daemon.
Is CVE-2010-0629 exploitable remotely?
Yes, CVE-2010-0629 can be exploited remotely by authenticated users who send a malformed request to the kadmind service.