CVE-2010-0629 Use after free in n/a

Medium 6.5 Published 7 Apr 2010 Updated 7 Aug 2024

Remote authenticated users can crash the Kerberos admin daemon via a use-after-free vulnerability triggered by an invalid API version request.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2010-0629?

CVE-2010-0629 is a medium-severity use after free vulnerability in Canonical Ubuntu Linux, published on 7 Apr 2010. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Weakness: CWE-416

Which versions are affected by CVE-2010-0629?

It affects 5 products.

Linux distribution packages (14)

`krb5` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-36.el5_5.2`
`krb5-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-36.el5_5.2`
`krb5-libs` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-36.el5_5.2`
`krb5-workstation` Red Hat:enterprise_linux:5::client	All versions	`0:1.6.1-36.el5_5.2`
`krb5` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-36.el5_5.2`
`krb5-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-36.el5_5.2`
`krb5-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-36.el5_5.2`
`krb5-server` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:1.6.1-36.el5_5.2`
`krb5` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`
`krb5-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`
`krb5-devel` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`
`krb5-libs` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`
`krb5-server` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`
`krb5-workstation` Red Hat:enterprise_linux:5::server	All versions	`0:1.6.1-36.el5_5.2`

Products include Canonical Ubuntu Linux, Fedoraproject Fedora, Mit Kerberos 5, Opensuse Opensuse, Suse Linux Enterprise.

How do I fix CVE-2010-0629?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2010-0629 being exploited?

There is no known exploitation of CVE-2010-0629 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2010-0629, DSA-2031-1, GHSA-6243-f9c4-77f4, RHSA-2010:0343.