DEBIAN-CVE-2010-1321

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2010-1321
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-1321.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2010-1321
Upstream
Published
2010-05-19T18:30:03Z
Modified
2025-09-25T00:14:03.903319Z
Summary
[none]
Details

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.

References

Affected packages

Debian:11

heimdal

Package

Name
heimdal
Purl
pkg:deb/debian/heimdal?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0~git20100605.dfsg.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

krb5

Package

Name
krb5
Purl
pkg:deb/debian/krb5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.1+dfsg-3

Ecosystem specific 

{
    "urgency": "low"
}

Debian:12

heimdal

Package

Name
heimdal
Purl
pkg:deb/debian/heimdal?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0~git20100605.dfsg.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

krb5

Package

Name
krb5
Purl
pkg:deb/debian/krb5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.1+dfsg-3

Ecosystem specific 

{
    "urgency": "low"
}

Debian:13

heimdal

Package

Name
heimdal
Purl
pkg:deb/debian/heimdal?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0~git20100605.dfsg.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

krb5

Package

Name
krb5
Purl
pkg:deb/debian/krb5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.1+dfsg-3

Ecosystem specific 

{
    "urgency": "low"
}

Debian:14

heimdal

Package

Name
heimdal
Purl
pkg:deb/debian/heimdal?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0~git20100605.dfsg.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

krb5

Package

Name
krb5
Purl
pkg:deb/debian/krb5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.1+dfsg-3

Ecosystem specific 

{
    "urgency": "low"
}