CVE-2010-0628

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2…

published March 25, 2010

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03329 · 88.5th percentile
Published
2010-03-25T22:00Z
EPSS history
Timeline
  • 25 MAR 22:00Z
    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2…
    cvelistv5