TI-2010-00598 Aliases CVE-2010-0629 GHSA-6243-f9c4-77f4

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5…

LOW 37CWE-416Published 2010-04-07 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Why it matters now

EPSS 0.05469 92nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPE	Versions	Role	Vendor
cpe:2.3:a:mit:kerberos_5::::::::	1.5 – 1.6.3	Vulnerable	moos-ivp
cpe:2.3:o:fedoraproject:fedora:11:::::::*	11	Vulnerable	Fedoraproject
cpe:2.3:o:opensuse:opensuse:11.0:::::::*	11.0	Vulnerable	openSUSE
cpe:2.3:o:opensuse:opensuse:11.1:::::::*	11.1	Vulnerable	openSUSE
cpe:2.3:o:suse:linux_enterprise:11.0:-::::::	11.0	Vulnerable	SUSE
cpe:2.3:o:canonical:ubuntu_linux:8.04::::-:::	8.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::*	8.10	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::*	9.04	Vulnerable	Canonical

cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* Versions 1.5 – 1.6.3 Vulnerable ·moos-ivp
cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Fedoraproject
cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·openSUSE
cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·openSUSE
cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:* Versions 11.0 Vulnerable ·SUSE
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* Versions 8.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:* Versions 9.04 Vulnerable ·Canonical

Remediation

Red Hat 1 advisory

RHSA-2010:0343 Released 2010-04-06 · Red Hat rating Important
krb5 security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-36.el5_5.2, krb5-devel-1.6.1-36.el5_5.2, krb5-devel-1.6.1-36.el5_5.2.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-36.el5_5.2, krb5-libs-1.6.1-36.el5_5.2, krb5-libs-1.6.1-36.el5_5.2.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-36.el5_5.2, krb5-devel-1.6.1-36.el5_5.2, krb5-devel-1.6.1-36.el5_5.2.i386 +2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux (v. 5 server)	Fixed	RHSA-2010:0343
Red Hat Enterprise Linux Desktop (v. 5 client)	Fixed	RHSA-2010:0343
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)	Fixed	RHSA-2010:0343

Timeline

2026-10-02 Threatist record created from CVE-2010-0629
2026-10-03 Alias added: GHSA-6243-f9c4-77f4

References

Exploit 1

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052

Patch 1

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt

Advisory 7

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences