ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-libsUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-pkinit | May 4, 2022 | Jul 22, 2021 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jul 22, 2021 |
| Centos_linux | — | Upgrade krb5-devel-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-server-ldap-debuginfoUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-debugsourceUpgrade krb5-workstationUpgrade krb5-workstation-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-develUpgrade krb5-debuginfoUpgrade krb5-server-ldap | Sep 22, 2021 | Jul 22, 2021 |
| Debian | — | Upgrade krb5 | Jul 26, 2021 | Jul 22, 2021 |
| Freebsd | — | Upgrade mysql80-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mysql80-serverUpgrade mysql57-serverUpgrade mysql-connector-javaUpgrade mariadb104-server | Nov 4, 2022 | Oct 17, 2021 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | May 6, 2024 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-pkinit | Sep 24, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5Upgrade krb5-client | Nov 12, 2021 | Jul 22, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Jun 15, 2026 | Jul 22, 2021 |
| Oracle Solaris | — | Upgrade security/kerberos-5/kdc to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4Upgrade security/kerberos-5 to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Jul 22, 2021 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-workstation | Sep 23, 2021 | Jul 12, 2021 |
| Redhat_linux | — | Upgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-server-ldapUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-develUpgrade libkadm5No solution existsUpgrade krb5-libs | Sep 22, 2021 | Jul 22, 2021 |
| Rocky_linux | — | Upgrade krb5-debugsourceUpgrade krb5-workstation-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-libsUpgrade krb5-server-ldap-debuginfoUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-server-debuginfoUpgrade krb5-libs-debuginfo | Mar 12, 2024 | Jul 22, 2021 |
| Suse | — | Upgrade python3-talloc-32bitUpgrade python3-ldbUpgrade libnfsidmap-sssUpgrade samba-client-libsUpgrade python3-tallocUpgrade krb5-serverUpgrade sssd-dbusUpgrade sssd-wbclientUpgrade samba-clientUpgrade samba-client-32bitUpgrade sssd-ipaUpgrade samba-winbind-libsUpgrade python3-talloc-develUpgrade samba-ldb-ldapUpgrade samba-libs-python3-32bitUpgrade sssd-commonUpgrade python3-apparmorUpgrade python3-teventUpgrade libsss_certmap-develUpgrade prometheus-blackbox_exporterUpgrade libsamba-policy-develUpgrade python3-tdb-32bitUpgrade libtevent0Upgrade libapparmor1-32bitUpgrade krb5Upgrade golang-github-prometheus-promuUpgrade libapparmor1Upgrade samba-ad-dc-libsUpgrade krb5-32bitUpgrade talloc-manUpgrade apparmor-parserUpgrade libtdb1Upgrade samba-toolUpgrade golang-github-prometheus-node_exporterUpgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade python3-ldb-develUpgrade libtalloc2-32bitUpgrade apparmor-docsUpgrade samba-libsUpgrade apache2-mod_apparmorUpgrade samba-client-libs-32bitUpgrade libipa_hbac0Upgrade python3-tdbUpgrade libsamba-policy0-python3Upgrade libsamba-policy-python3-develUpgrade samba-libs-python3-64bitUpgrade golang-github-boynux-squid_exporterUpgrade libsss_idmap-develUpgrade python3-sss-murmurUpgrade krb5-plugin-preauth-otpUpgrade sssd-winbind-idmapUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-preauth-spakeUpgrade samba-docUpgrade krb5-plugin-kdb-ldapUpgrade samba-ad-dc-libs-32bitUpgrade samba-libs-64bitUpgrade prometheus-postgres_exporterUpgrade libtalloc-develUpgrade libsss_simpleifp0Upgrade sssd-proxyUpgrade python3-rhnlibUpgrade ruby-apparmorUpgrade libtevent-develUpgrade samba-gpupdateUpgrade libsss_nss_idmap-develUpgrade pam_apparmorUpgrade libldb2-32bitUpgrade sssd-toolsUpgrade samba-libs-python3Upgrade sambaUpgrade ldb-toolsUpgrade samba-develUpgrade tdb-toolsUpgrade samba-winbind-libs-32bitUpgrade krb5-clientUpgrade samba-dsdb-modulesUpgrade wireUpgrade libtdb-develUpgrade python3-tevent-32bitUpgrade libldb-develUpgrade libsss_certmap0Upgrade spacecmdUpgrade apparmor-profilesUpgrade apparmor-parser-langUpgrade libtevent0-32bitUpgrade krb5-mini-develUpgrade sssd-krb5Upgrade libsss_simpleifp-develUpgrade krb5-devel-32bitUpgrade libapparmor-develUpgrade tevent-manUpgrade sssd-wbclient-develUpgrade sssd-ldapUpgrade python3-sssd-configUpgrade python3-sss_nss_idmapUpgrade libsamba-policy0-python3-32bitUpgrade perl-apparmorUpgrade krb5-develUpgrade apparmor-abstractionsUpgrade grafanaUpgrade libtalloc2Upgrade python3-ldb-32bitUpgrade pam_apparmor-32bitUpgrade samba-cephUpgrade sssd-adUpgrade libsss_idmap0Upgrade samba-winbindUpgrade libsss_nss_idmap0Upgrade ctdbUpgrade python3-ipa_hbacUpgrade dracut-saltbootUpgrade libsamba-policy0-python3-64bitUpgrade samba-ad-dcUpgrade samba-libs-32bitUpgrade samba-client-64bitUpgrade sssd-krb5-commonUpgrade samba-testUpgrade libldb2Upgrade samba-devel-32bitUpgrade libtdb1-32bitUpgrade libipa_hbac-develUpgrade sssdUpgrade krb5-miniUpgrade apparmor-utilsUpgrade apparmor-utils-lang | Aug 21, 2021 | Jul 22, 2021 |
| Ubuntu | — | Upgrade krb5-pkinitUpgrade krb5-kdcUpgrade krb5-kdc-ldapUpgrade krb5-k5tls | Mar 22, 2023 | Jul 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub