CVE-2010-1321
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
- EPSS
- 6.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- mit:kerberos_5
- opensuse:opensuse
- oracle:database_server
- suse:linux_enterprise_server
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.html
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html