cve/2010/CVE-2010-0629.md

CVE-2010-0629

Description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

POC

Reference

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489

Github

No PoCs found on GitHub currently.