CVE-2010-1321: The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5...

Security readout for executives and security teams

CVE-2010-1321 is a denial-of-service flaw in MIT Kerberos 5’s GSS-API handling. An authenticated remote user could send an invalid Kerberos request that crashes kadmind or another application using the vulnerable library. The main business risk is service disruption, not data theft or remote code execution based on the provided sources. Exposure is most likely where MIT Kerberos 5 GSS-API services are deployed, especially kadmind or applications linked against vulnerable krb5 libraries. The attacker must be remotely authenticated, which limits reach but still matters for internal, partner, or compromised-account scenarios. Treat as a service-availability issue. Patch during the next normal security maintenance window unless Kerberos administration services are exposed to broad authenticated populations or recent crashes suggest attempted abuse. Mitigation focus: Upgrade MIT Kerberos 5 1.8 deployments to 1.8.2 or vendor-fixed packages.; Apply relevant OS or appliance vendor advisories for krb5 packages.; Restrict Kerberos administration and GSS-API services to trusted authenticated users..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.