The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-476.
Summary
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* | up to 1.7.1; 1.8 to before 1.8.2 | Vulnerable | moos-ivp |
| cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Debian |
| cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* | 6.06 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:* | 8.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:* | 9.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* | 9.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:* | 10.04 | Vulnerable | Canonical |
| cpe:2.3:a:oracle:database_server:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Oracle |
| cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | openSUSE |
- cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* Versions up to 1.7.1; 1.8 to before 1.8.2 Vulnerable ·moos-ivp
- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:* Versions 8.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:* Versions 9.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:* Versions 10.04 Vulnerable ·Canonical
- cpe:2.3:a:oracle:database_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Oracle
- cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·openSUSE
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:* | 11.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* | 11.2 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* | 11.3 | Vulnerable | openSUSE |
| cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:* | 10 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* | 11 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:* | 11 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:* | 11 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:* | 12 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:* | 13 | Vulnerable | Fedoraproject |
- cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* Versions 11.2 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·openSUSE
- cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:* Versions 10 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* Versions 11 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
- cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Fedoraproject
Remediation
Red Hat 8 advisories
- RHSA-2011:0880 Released 2011-06-16 · Red Hat rating LowRed Hat Network Satellite server IBM Java Runtime security update
- Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.9.1-1jpp.1.el5.i386, java-1.6.0-ibm-devel-1:1.6.0.9.1-1jpp.1.el5 +1
- RHSA-2011:0152 Released 2011-01-17 · Red Hat rating Moderatejava-1.4.2-ibm security update
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.8-1jpp.3.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.8-1jpp.2.el5, java-1.4.2-ibm-1.4.2.13.8-1jpp.2.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.8-1jpp.2.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.8-1jpp.2.el5, java-1.4.2-ibm-1.4.2.13.8-1jpp.2.el5.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.2.el5.ia64 +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.8-1jpp.3.el4.ia64 +13
- RHSA-2010:0987 Released 2010-12-15 · Red Hat rating Criticaljava-1.6.0-ibm security and bug fix update
- Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.3.el4 +11
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4.i386, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4.ppc +18
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.9.0-1jpp.3.el5 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.4.el6 +4
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.3.el4 +11
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.4.el6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5.i386, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el5.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.4.el6 +5
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.9.0-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.3.el4 +11
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-demo-1:1.6.0.9.0-1jpp.4.el6, java-1.6.0-ibm-devel-1:1.6.0.9.0-1jpp.4.el6 +4
Show 5 more Red Hat advisories
- RHSA-2010:0935 Released 2010-12-01 · Red Hat rating Moderatejava-1.4.2-ibm security update
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.7-1jpp.3.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el5, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.7-1jpp.3.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el5, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el5.i386, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el5.ia64 +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.i386, java-1.4.2-ibm-1.4.2.13.7-1jpp.3.el4.ia64 +13
- RHSA-2010:0873 Released 2010-11-10 · Red Hat rating Criticaljava-1.5.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-devel-1:1.5.0.12.2-1jpp.1.el6 +2
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-devel-1:1.5.0.12.2-1jpp.1.el6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-devel-1:1.5.0.12.2-1jpp.1.el6 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el6, java-1.5.0-ibm-devel-1:1.5.0.12.2-1jpp.1.el6 +2
- RHSA-2010:0807 Released 2010-10-27 · Red Hat rating Criticaljava-1.5.0-ibm security update
- Red Hat Desktop version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.ppc +17
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.12.2-1jpp.1.el5 +11
- Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9
- RHSA-2010:0770 Released 2010-10-14 · Red Hat rating Criticaljava-1.6.0-sun security update
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el5 +9
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.22-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.22-1jpp.1.el4 +9
- RHSA-2010:0423 Released 2010-05-18 · Red Hat rating Importantkrb5 security update
- Red Hat Desktop version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +6
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386 +14
- Red Hat Enterprise Linux AS version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +14
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386, krb5-libs-1.6.1-36.el5_5.4 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386 +2
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +6
- Red Hat Enterprise Linux ES version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +10
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +10
- Red Hat Enterprise Linux WS version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +10
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2010:0423 |
| Red Hat Desktop version 4 Extras | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux AS version 4 Extras | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2010:0873, RHSA-2010:0987 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux ES version 4 Extras | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2010:0873, RHSA-2010:0987 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2010:0873, RHSA-2010:0987 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2010:0423 |
| Red Hat Enterprise Linux WS version 4 Extras | Fixed | RHSA-2010:0770, RHSA-2010:0807, RHSA-2010:0935, RHSA-2010:0987, RHSA-2011:0152 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2010:0873, RHSA-2010:0987 |
| Red Hat Satellite 5.4 (RHEL v.5) | Fixed | RHSA-2011:0880 |
Not affected: 1 product
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2010-1321
- 2026-10-03 Alias added: GHSA-pcm6-6x97-2mrc
References
Advisory 42
- SUSE-SU-2012:0042
- ADV-2011-0134
- http://support.avaya.com/css/P8/documents/100114315
- USN-940-1
- HPSBMU02799
- MDVSA-2010:100
- TA11-201A
- FEDORA-2010-8749
- RHSA-2010:0770
- FEDORA-2010-8796
- ADV-2010-1574
- oval:org.mitre.oval:def:7198
- ADV-2010-1192
- ADV-2010-1196
- SUSE-SR:2010:013
- SSRT100107
- http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- RHSA-2010:0987
- USN-940-2
- oval:org.mitre.oval:def:7450
- RHSA-2011:0880
- http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
- SUSE-SU-2012:0010
- RHSA-2010:0873
- SUSE-SR:2010:014
- ADV-2010-1177
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- ADV-2010-3112
- FEDORA-2010-8805
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- TA10-287A
- DSA-2052
- RHSA-2010:0423
- SUSE-SR:2010:019
- ADV-2010-1882
- RHSA-2011:0152
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
- oval:org.mitre.oval:def:11604
- RHSA-2010:0807
- RHSA-2010:0935
- ADV-2010-1222
- ADV-2010-1193
Other 1
Sources
- CVE-2010-1321 · CVE Program
- CVE-2010-1321 · NVD
- FIRST EPSS
- GHSA-pcm6-6x97-2mrc · GitHub Advisory Database · CC BY 4.0
- CVE-2010-1321 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences