CVE-2010-4022: mit kerberos_5 Improper Input Validation
Vulnerability summary
CVE-2010-4022 is a medium (CVSS 5.0) Improper Input Validation vulnerability in mit kerberos_5. EPSS estimates a 3.65% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 10-02-2011PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.65%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.65% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- krb5< 1.8.3+dfsg-5
Mit1 product
- kerberos_51.7 | 1.8 | 1.9
2 vendors · 2 products
