CVE-2010-4022

CVE-2010-4022 describes a denial-of-service vulnerability affecting the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos versions 1.7, 1.8, and 1.9 when operating in standalone mode. An attacker can exploit a flaw in how the do_standalone function handles abnormal worker child process exits, leading to the termination of the listening process, preventing new connections, and disrupting updates to slave KDCs. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, resulting in a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.