CVE-2010-1321
published 2010-05-19CVE-2010-1321: The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in…
PriorityP431medium6.8CVSS 2.0
AVNACLAuSCNINAC
EPSS
6.88%
93.4th percentile
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
Affected
33 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | heimdal | < heimdal 1.4.0~git20100605.dfsg.1-1 (bookworm) | heimdal 1.4.0~git20100605.dfsg.1-1 (bookworm) |
| debian | krb5 | < heimdal 1.4.0~git20100605.dfsg.1-1 (bookworm) | heimdal 1.4.0~git20100605.dfsg.1-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| heimdal_project | heimdal | >= 0 < 1.4.0~git20100605.dfsg.1-1 | 1.4.0~git20100605.dfsg.1-1 |
| heimdal_project | heimdal | >= 0 < 1.4.0~git20100605.dfsg.1-1 | 1.4.0~git20100605.dfsg.1-1 |
| heimdal_project | heimdal | >= 0 < 1.4.0~git20100605.dfsg.1-1 | 1.4.0~git20100605.dfsg.1-1 |
| heimdal_project | heimdal | >= 0 < 1.4.0~git20100605.dfsg.1-1 | 1.4.0~git20100605.dfsg.1-1 |
| mit | kerberos_5 | <= 1.7.1 | — |
| mit | kerberos_5 | >= 1.8 < 1.8.2 | 1.8.2 |
| mit | krb5 | >= 0 < 1.8.1+dfsg-3 | 1.8.1+dfsg-3 |
| mit | krb5 | >= 0 < 1.8.1+dfsg-3 | 1.8.1+dfsg-3 |
| mit | krb5 | >= 0 < 1.8.1+dfsg-3 | 1.8.1+dfsg-3 |
| mit | krb5 | >= 0 < 1.8.1+dfsg-3 | 1.8.1+dfsg-3 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
osv6.8MEDIUM
vendor_ubuntu10.0CRITICAL
vendor_cisco6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pcm6-6x97-2mrc: The kg_accept_krb5 function in krb5/accept_sec_context
ghsa_unreviewed·2022-05-02
CVE-2010-1321 [MEDIUM] CWE-476 GHSA-pcm6-6x97-2mrc: The kg_accept_krb5 function in krb5/accept_sec_context
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
OSV
CVE-2010-1321: The kg_accept_krb5 function in krb5/accept_sec_context
osv·2010-05-19·CVSS 6.8
CVE-2010-1321 [MEDIUM] CVE-2010-1321: The kg_accept_krb5 function in krb5/accept_sec_context
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
VMware
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
vendor_vmware·2011-02-10·CVSS 5.0
CVE-2008-0085 [MEDIUM] Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
VMSA-2011-0003: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory VMware Security Advisory Advisory ID: VMware Security Advisory Synopsis: Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory Issue date: VMware Security Advisory Updated on: VMware Security Advisory CVE numbers:
CVEs: CVE-2008-0085, CVE-2008-0086, CVE-2008-0106, CVE-2008-0107, CVE-2008-3825, CVE-2008-5416, CVE-2009-1384, CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548, CVE-2009-3555, CVE-2009-4308, CVE-2010-0003, CVE-2010-0007, CVE-2010-0008, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085,
Ubuntu
Kerberos vulnerability
vendor_ubuntu·2010-07-21·CVSS 4.0
CVE-2010-1321 [MEDIUM] Kerberos vulnerability
Title: Kerberos vulnerability
Summary: An attacker could send crafted input to kadmind and cause it to crash.
USN-940-1 fixed vulnerabilities in Kerberos. This update provides the
corresponding updates for Ubuntu 10.04.
Original advisory details:
Joel Johnson, Brian Almeida, and Shawn Emery discovered that Kerberos
did not correctly verify certain packet structures. An unauthenticated
remote attacker could send specially crafted traffic to cause the KDC or
kadmind services to crash, leading to a denial of service. (CVE-2010-1320,
CVE-2010-1321)
Instructions: In general, a standard system update will make all the necessary changes.
Cisco
MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
vendor_cisco·2010-05-19·CVSS 6.8
CVE-2010-1321 [MEDIUM] CWE-399 MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
MIT Kerberos contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.
The vulnerability is in the GSS-API acceptor component due to lack of pointer validation. An authenticated, remote attacker could exploit the vulnerability by making a crafted request to the affected component. This action could cause the component to crash, resulting in a DoS condition.
MIT has confirmed this vulnerability and released updated software.
The vulnerability can be exploited only by an authenticated attacker, which somewhat reduces the threat of an attack on affected systems.
Cisco Network Admission Control Guest Server may be affected if Active Directory single sign-on is
Ubuntu
Kerberos vulnerabilities
vendor_ubuntu·2010-05-19·CVSS 10.0
CVE-2007-5971 [CRITICAL] Kerberos vulnerabilities
Title: Kerberos vulnerabilities
Summary: Unauthenticated remote attackers could cause Kerberos servers to crash,
leading to a denial of service.
It was discovered that Kerberos did not correctly free memory in the
GSSAPI and kdb libraries. If a remote attacker were able to manipulate
an application using these libraries carefully, the service could
crash, leading to a denial of service. (Only Ubuntu 6.06 LTS was
affected.) (CVE-2007-5902, CVE-2007-5971, CVE-2007-5972)
Joel Johnson, Brian Almeida, and Shawn Emery discovered that Kerberos
did not correctly verify certain packet structures. An unauthenticated
remote attacker could send specially crafted traffic to cause the KDC or
kadmind services to crash, leading to a denial of service. (CVE-2010-1320,
CVE-2010-1321)
Instructions: In ge
Red Hat
krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)
vendor_redhat·2010-05-18·CVSS 6.8
CVE-2010-1321 [MEDIUM] CWE-476 krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)
krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
Package: krb5 (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2010-1321: heimdal - The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library ...
vendor_debian·2010·CVSS 6.8
CVE-2010-1321 [MEDIUM] CVE-2010-1321: heimdal - The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library ...
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
Scope: local
bookworm: resolved (fixed in 1.4.0~git20100605.dfsg.1-1)
bullseye: resolved (fixed in 1.4.0~git20100605.dfsg.1-1)
forky: resolved (fixed in 1.4.0~git20100605.dfsg.1-1)
sid: resolved (fixed in 1.4.0~git20100605.dfsg.1-1)
trixie: resolved (fixed in 1.4.0~git20100605.dfsg.1-1)
No detection rules found.
No public exploits indexed.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlhttp://marc.info/?l=bugtraq&m=134254866602253&w=2http://osvdb.org/64744http://secunia.com/advisories/39762http://secunia.com/advisories/39784http://secunia.com/advisories/39799http://secunia.com/advisories/39818http://secunia.com/advisories/39849http://secunia.com/advisories/40346http://secunia.com/advisories/40685http://secunia.com/advisories/41967http://secunia.com/advisories/42432http://secunia.com/advisories/42974http://secunia.com/advisories/43335http://secunia.com/advisories/44954http://support.avaya.com/css/P8/documents/100114315http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txthttp://www.debian.org/security/2010/dsa-2052http://www.mandriva.com/security/advisories?name=MDVSA-2010:100http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0423.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0770.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0807.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0873.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0935.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0987.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0152.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttp://www.securityfocus.com/archive/1/511331/100/0/threadedhttp://www.securityfocus.com/archive/1/516397/100/0/threadedhttp://www.securityfocus.com/bid/40235http://www.ubuntu.com/usn/USN-940-1http://www.ubuntu.com/usn/USN-940-2http://www.us-cert.gov/cas/techalerts/TA10-287A.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlhttp://www.vmware.com/security/advisories/VMSA-2011-0003.htmlhttp://www.vupen.com/english/advisories/2010/1177http://www.vupen.com/english/advisories/2010/1192http://www.vupen.com/english/advisories/2010/1193http://www.vupen.com/english/advisories/2010/1196http://www.vupen.com/english/advisories/2010/1222http://www.vupen.com/english/advisories/2010/1574http://www.vupen.com/english/advisories/2010/1882http://www.vupen.com/english/advisories/2010/3112http://www.vupen.com/english/advisories/2011/0134https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11604https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7198https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7450http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlhttp://marc.info/?l=bugtraq&m=134254866602253&w=2http://osvdb.org/64744http://secunia.com/advisories/39762http://secunia.com/advisories/39784http://secunia.com/advisories/39799http://secunia.com/advisories/39818http://secunia.com/advisories/39849http://secunia.com/advisories/40346http://secunia.com/advisories/40685http://secunia.com/advisories/41967http://secunia.com/advisories/42432http://secunia.com/advisories/42974http://secunia.com/advisories/43335http://secunia.com/advisories/44954http://support.avaya.com/css/P8/documents/100114315http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txthttp://www.debian.org/security/2010/dsa-2052http://www.mandriva.com/security/advisories?name=MDVSA-2010:100http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0423.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0770.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0807.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0873.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0935.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0987.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0152.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0880.htmlhttp://www.securityfocus.com/archive/1/511331/100/0/threadedhttp://www.securityfocus.com/archive/1/516397/100/0/threaded
+ 18 more references
2010-05-19
Published