01 Record

CVE-2010-1321

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 6.88% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 93.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2010-05-19 18:13Z16 YR AGO

Last updated

2024-08-07 01:21Z2 YR AGO

Reserved

2010-04-08

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.1

Document digest

1fa71153c33b8c25ce3c2bf822da47c9f9ea422bf6fd3c75dc37188355f9713d

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

fedoraprojectfedoraNot specified—

mitkerberos_5Not specified—

opensuseopensuseNot specified—

oracledatabase_serverNot specified—

redhatenterprise_linuxNot specified—

redhatnetwork_satelliteNot specified—

redhatrhel_extrasNot specified—

suselinux_enterprise_serverNot specified—

06 References

lists.opensuse.orgSUSE-SU-2012:0042http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.htmlvendor-advisoryx_refsource_SUSE
secunia.com39818http://secunia.com/advisories/39818third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2011-0134http://www.vupen.com/english/advisories/2011/0134vdb-entryx_refsource_VUPEN
support.avaya.comhttp://support.avaya.com/css/P8/documents/100114315x_refsource_CONFIRM
secunia.com39784http://secunia.com/advisories/39784third-party-advisoryx_refsource_SECUNIA
www.ubuntu.comUSN-940-1http://www.ubuntu.com/usn/USN-940-1vendor-advisoryx_refsource_UBUNTU
marc.infoHPSBMU02799http://marc.info/?l=bugtraq&m=134254866602253&w=2vendor-advisoryx_refsource_HP
www.securityfocus.com20100518 MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer derefhttp://www.securityfocus.com/archive/1/511331/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.mandriva.comMDVSA-2010:100http://www.mandriva.com/security/advisories?name=MDVSA-2010:100vendor-advisoryx_refsource_MANDRIVA
www.us-cert.govTA11-201Ahttp://www.us-cert.gov/cas/techalerts/TA11-201A.htmlthird-party-advisoryx_refsource_CERT
lists.fedoraproject.orgFEDORA-2010-8749http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.htmlvendor-advisoryx_refsource_FEDORA
www.redhat.comRHSA-2010:0770http://www.redhat.com/support/errata/RHSA-2010-0770.htmlvendor-advisoryx_refsource_REDHAT
secunia.com40685http://secunia.com/advisories/40685third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com40235http://www.securityfocus.com/bid/40235vdb-entryx_refsource_BID
lists.fedoraproject.orgFEDORA-2010-8796http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.htmlvendor-advisoryx_refsource_FEDORA
www.vupen.comADV-2010-1574http://www.vupen.com/english/advisories/2010/1574vdb-entryx_refsource_VUPEN
oval.cisecurity.orgoval:org.mitre.oval:def:7198https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7198vdb-entrysignaturex_refsource_OVAL
www.vupen.comADV-2010-1192http://www.vupen.com/english/advisories/2010/1192vdb-entryx_refsource_VUPEN
secunia.com39799http://secunia.com/advisories/39799third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2010-1196http://www.vupen.com/english/advisories/2010/1196vdb-entryx_refsource_VUPEN
lists.opensuse.orgSUSE-SR:2010:013http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlvendor-advisoryx_refsource_SUSE
h20000.www2.hp.comSSRT100107http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427vendor-advisoryx_refsource_HP
secunia.com39849http://secunia.com/advisories/39849third-party-advisoryx_refsource_SECUNIA
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.htmlx_refsource_CONFIRM
www.redhat.comRHSA-2010:0987http://www.redhat.com/support/errata/RHSA-2010-0987.htmlvendor-advisoryx_refsource_REDHAT
secunia.com44954http://secunia.com/advisories/44954third-party-advisoryx_refsource_SECUNIA
www.ubuntu.comUSN-940-2http://www.ubuntu.com/usn/USN-940-2vendor-advisoryx_refsource_UBUNTU
secunia.com42432http://secunia.com/advisories/42432third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:7450https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7450vdb-entrysignaturex_refsource_OVAL
secunia.com39762http://secunia.com/advisories/39762third-party-advisoryx_refsource_SECUNIA
www.redhat.comRHSA-2011:0880http://www.redhat.com/support/errata/RHSA-2011-0880.htmlvendor-advisoryx_refsource_REDHAT
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.htmlx_refsource_CONFIRM
web.mit.eduhttp://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txtx_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2012:0010http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.htmlvendor-advisoryx_refsource_SUSE
www.redhat.comRHSA-2010:0873http://www.redhat.com/support/errata/RHSA-2010-0873.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SR:2010:014http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlvendor-advisoryx_refsource_SUSE
www.vupen.comADV-2010-1177http://www.vupen.com/english/advisories/2010/1177vdb-entryx_refsource_VUPEN
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2011-0003.htmlx_refsource_CONFIRM
secunia.com42974http://secunia.com/advisories/42974third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2010-3112http://www.vupen.com/english/advisories/2010/3112vdb-entryx_refsource_VUPEN
lists.fedoraproject.orgFEDORA-2010-8805http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.htmlvendor-advisoryx_refsource_FEDORA
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlx_refsource_CONFIRM
www.us-cert.govTA10-287Ahttp://www.us-cert.gov/cas/techalerts/TA10-287A.htmlthird-party-advisoryx_refsource_CERT
secunia.com43335http://secunia.com/advisories/43335third-party-advisoryx_refsource_SECUNIA
www.debian.orgDSA-2052http://www.debian.org/security/2010/dsa-2052vendor-advisoryx_refsource_DEBIAN
www.redhat.comRHSA-2010:0423http://www.redhat.com/support/errata/RHSA-2010-0423.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SR:2010:019http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlvendor-advisoryx_refsource_SUSE
www.vupen.comADV-2010-1882http://www.vupen.com/english/advisories/2010/1882vdb-entryx_refsource_VUPEN
www.redhat.comRHSA-2011:0152http://www.redhat.com/support/errata/RHSA-2011-0152.htmlvendor-advisoryx_refsource_REDHAT
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlx_refsource_CONFIRM
www.securityfocus.com20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESXhttp://www.securityfocus.com/archive/1/516397/100/0/threadedmailing-listx_refsource_BUGTRAQ
secunia.com40346http://secunia.com/advisories/40346third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:11604https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11604vdb-entrysignaturex_refsource_OVAL
secunia.com41967http://secunia.com/advisories/41967third-party-advisoryx_refsource_SECUNIA
www.redhat.comRHSA-2010:0807http://www.redhat.com/support/errata/RHSA-2010-0807.htmlvendor-advisoryx_refsource_REDHAT
www.redhat.comRHSA-2010:0935http://www.redhat.com/support/errata/RHSA-2010-0935.htmlvendor-advisoryx_refsource_REDHAT
osvdb.org64744http://osvdb.org/64744vdb-entryx_refsource_OSVDB
www.vupen.comADV-2010-1222http://www.vupen.com/english/advisories/2010/1222vdb-entryx_refsource_VUPEN
www.vupen.comADV-2010-1193http://www.vupen.com/english/advisories/2010/1193vdb-entryx_refsource_VUPEN

07 Fixed in

Debian 12

heimdal
Fixed in 1.4.0~git20100605.dfsg.1-1
krb5
Fixed in 1.8.1+dfsg-3

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

heimdal
Fixed in 1.4.0~git20100605.dfsg.1-1
krb5
Fixed in 1.8.1+dfsg-3

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

heimdal
Fixed in 1.4.0~git20100605.dfsg.1-1
krb5
Fixed in 1.8.1+dfsg-3

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.