CVE-2010-1322

Name	CVE-2010-1322
Description	The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	599237

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
krb5 (PTS)	bullseye	1.18.3-6+deb11u5	fixed
	bullseye (security)	1.18.3-6+deb11u7	fixed
	bookworm	1.20.1-2+deb12u4	fixed
	bookworm (security)	1.20.1-2+deb12u2	fixed
	trixie	1.21.3-5	fixed
	forky, sid	1.22.1-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
krb5	source	etch	(not affected)
krb5	source	lenny	(not affected)
krb5	source	(unstable)	1.8.3+dfsg-2	599237

Notes

[lenny] - krb5 <not-affected> (Only affects 1.8)
[etch] - krb5 <not-affected> (Only affects 1.8)
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-006.txt