CVE-2010-4022

2011-02-1018:00:18

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.135

Percentile

95.6%

JSON

The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process “exits abnormally,” which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.

Affected configurations

Nvd

Node

mitkerberos_5Match1.7

mitkerberos_5Match1.8

mitkerberos_5Match1.9

VendorProductVersionCPE
mitkerberos_51.7cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*
mitkerberos_51.8cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*
mitkerberos_51.9cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mit	kerberos_5	1.7	cpe:2.3:a:mit:kerberos_5:1.7:::::::*
mit	kerberos_5	1.8	cpe:2.3:a:mit:kerberos_5:1.8:::::::*
mit	kerberos_5	1.9	cpe:2.3:a:mit:kerberos_5:1.9:::::::*