CVE-2010-0629: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Affected products

• Canonical Ubuntu Linux: version 8.04 only; version 8.10 only; version 9.04 only
• Fedoraproject Fedora: version 11 only
• Mit Kerberos 5: from 1.5, up to and including 1.6.3
• Opensuse Opensuse: version 11.0 only; version 11.1 only
• Suse Linux Enterprise: version 11.0 only

Published 2010-04-07. Last modified 2026-06-16.