CVE-2020-10595

CVE-2020-10595 is a critical buffer overflow vulnerability in pam-krb5 before version 4.9, affecting Debian and pam-krb5_project distributions. This flaw can lead to remote code execution by overflowing a buffer with a single null byte during supplemental Kerberos library prompting, such as with PKINIT or the no_prompt PAM option. With a CVSS score of 9.8 (CRITICAL), it presents a high risk due to its network attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.