CVE-2010-1322 Null dereference in n/a
Remote attackers can crash the Kerberos KDC or potentially execute code via a malformed TGS request due to an uninitialized pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-1322?
CVE-2010-1322 is a medium-severity vulnerability in Mit Kerberos 5, published on 7 Oct 2010. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.
Weakness: CWE-20
Which versions are affected by CVE-2010-1322?
It affects 1 product.
Linux distribution packages (32)
krb5 Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-devel Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-libs Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-pkinit-openssl Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server-ldap Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5-workstation Red Hat:enterprise_linux:6::client | All versions | 0:1.8.2-3.el6_0.1 |
krb5 Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-libs Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-pkinit-openssl Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server-ldap Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5-workstation Red Hat:enterprise_linux:6::computenode | All versions | 0:1.8.2-3.el6_0.1 |
krb5 Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-devel Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-libs Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-pkinit-openssl Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server-ldap Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5-workstation Red Hat:enterprise_linux:6::server | All versions | 0:1.8.2-3.el6_0.1 |
krb5 Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-libs Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-pkinit-openssl Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-server-ldap Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
krb5-workstation Red Hat:enterprise_linux:6::workstation | All versions | 0:1.8.2-3.el6_0.1 |
Products include Mit Kerberos 5.
How do I fix CVE-2010-1322?
Upgrade to a fixed version.
Is CVE-2010-1322 being exploited?
There is no known exploitation of CVE-2010-1322 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as DEBIAN-CVE-2010-1322, GHSA-x582-whcx-rpqp, RHSA-2010:0863.