Is CVE-2010-1321 being actively exploited?

CVE-2010-1321 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-1321?

CVE-2010-1321 has a CVSS 2.0 base score of 6.8 (MEDIUM).

CVE-2010-1321

MEDIUM · CVSS 6.8EPSS 6.9%EU EUVD

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.

Key facts

CVSS score: 6.8 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Weakness (CWE): CWE-476
EPSS score: 6.9% (94th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-1350)
Published: May 19, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-1350 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
fedoraproject / fedora
fedoraproject / fedora
fedoraproject / fedora
mit / kerberos 5
opensuse / opensuse
opensuse / opensuse
opensuse / opensuse
opensuse / opensuse
oracle / database server
suse / linux enterprise server
suse / linux enterprise server
suse / linux enterprise server

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427(Broken Link)
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html(Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=134254866602253&w=2(Issue Tracking, Third Party Advisory)
http://osvdb.org/64744(Broken Link)
http://secunia.com/advisories/39762(Third Party Advisory)
http://secunia.com/advisories/39784(Third Party Advisory)
http://secunia.com/advisories/39799(Third Party Advisory)
http://secunia.com/advisories/39818(Third Party Advisory)
http://secunia.com/advisories/39849(Third Party Advisory)
http://secunia.com/advisories/40346(Third Party Advisory)
http://secunia.com/advisories/40685(Third Party Advisory)
http://secunia.com/advisories/41967(Third Party Advisory)
http://secunia.com/advisories/42432(Third Party Advisory)
http://secunia.com/advisories/42974(Third Party Advisory)
http://secunia.com/advisories/43335(Third Party Advisory)
http://secunia.com/advisories/44954(Third Party Advisory)
http://support.avaya.com/css/P8/documents/100114315(Third Party Advisory)
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txt(Patch, Vendor Advisory)
http://www.debian.org/security/2010/dsa-2052(Third Party Advisory)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:100(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0423.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0770.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0807.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0873.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0935.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2010-0987.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2011-0152.html(Third Party Advisory)
http://www.redhat.com/support/errata/RHSA-2011-0880.html(Third Party Advisory)
http://www.securityfocus.com/archive/1/511331/100/0/threaded(Third Party Advisory, VDB Entry)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain