CVE-2010-0629

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
• krbdev.mit.edu/rt/Ticket/Display.html · Vendor Advisory
• lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html · Mailing List
• secunia.com/advisories/39264 · Broken Link
• secunia.com/advisories/39290 · Broken Link
• secunia.com/advisories/39315 · Broken Link
• secunia.com/advisories/39324 · Broken Link
• secunia.com/advisories/39367 · Broken Link
• securitytracker.com/id · Broken Link
• ubuntu.com/usn/usn-924-1 · Third Party Advisory
• web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt · Patch
• debian.org/security/2010/dsa-2031 · Mailing List
• mandriva.com/security/advisories · Broken Link
• redhat.com/support/errata/RHSA-2010-0343.html · Broken Link
• securityfocus.com/archive/1/510566/100/0/threaded · Broken Link
• securityfocus.com/bid/39247 · Broken Link
• vupen.com/english/advisories/2010/0876 · Broken Link
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489 · Broken Link

kerberos 5 のその他の脆弱性

• CVE-2026-40356高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accep…
• CVE-2026-40355高 7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system…
• CVE-2024-37371緊急 9.1In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message …
• CVE-2024-37370高 7.5In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, ca…
• CVE-2024-26462中 5.5Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.