CVE-2010-4022: Mit Kerberos 5

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.

Affected products

• Mit Kerberos 5: version 1.7 only; version 1.8 only; version 1.9 only

Published 2011-02-10. Last modified 2026-06-16.