{"id":"CVE-2010-1324","aliases":["DEBIAN-CVE-2010-1324","EUVD-2010-1353","GHSA-gg3r-9x7c-vmfm","RHSA-2010:0925","openSUSE-SU-2024:10004-1"],"status":"published","title":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","severity":{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02253,"percentile":0.83052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2010-12-02T16:00:00Z","modified":"2026-10-23T18:01:44Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.8.3+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.8.3+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.8.3+dfsg-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3+dfsg-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-pkinit-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-3.el6_0.3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1.1"}]}],"bundled":54}],"products":[{"vendor":"mit","product":"kerberos_5"}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/3094","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:246","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://kb.vmware.com/kb/1035108","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/3118","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2011/0187","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/archive/1/514953/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://osvdb.org/69609","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=129562442714657\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3095","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/42399","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/45116","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securitytracker.com/id?1024803","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0925.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1030-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/43015","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT4581","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1324","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gg3r-9x7c-vmfm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-1324","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0925","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2010-007.txt","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=644825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648735","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0925.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1323","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1324","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4020","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3120","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-1324","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2010-12-02T16:00:00Z","modified":"2024-08-07T01:21:18.67Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1353","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2010-12-02T16:00:00Z","modified":"2024-08-07T01:21:18Z","updated_at":"2026-11-03T01:39:41.852422Z"}],"ghsa":[{"id":"GHSA-gg3r-9x7c-vmfm","title":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2022-05-02T06:21:37Z","modified":"2023-02-01T05:00:51Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T14:49:36.804109Z"}],"nvd":[{"id":"CVE-2010-1324","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2010-12-02T16:22:20.88Z","modified":"2026-06-16T23:18:08.087Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"CVE-2010-1324","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2010-12-02T16:22:20Z","modified":"2026-04-10T03:41:11.877377Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-1324","description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","status":"published","published":"2010-12-02T16:22:20.88Z","modified":"2026-10-23T18:01:44.912297787Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"openSUSE-SU-2024:10004-1","title":"krb5-1.15-1.1 on GA media","description":"These are all security issues fixed in the krb5-1.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:07.629761Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2010:0925","title":"Red Hat Security Advisory: krb5 security and bug fix update","status":"published","published":"2024-09-15T18:47:19Z","modified":"2026-06-26T12:20:48.452994018Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}