In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-server-ldapUpgrade mysql-develUpgrade libkadm5Upgrade mecab-develUpgrade mysql-libsUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-serverUpgrade krb5-pkinitUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql-testUpgrade mecabUpgrade krb5-devel | Aug 22, 2024 | Jun 28, 2024 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jun 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-debuginfo | Jul 23, 2024 | Jun 28, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-debugsourceUpgrade krb5-pkinit-debuginfoUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-libs-debuginfoUpgrade libkadm5Upgrade krb5-server-ldapUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-server-debuginfo | Feb 17, 2025 | Jun 27, 2024 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 28, 2024 |
| Debian | — | Upgrade krb5 | Jul 9, 2024 | Jun 28, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5-serverUpgrade krb5-clientUpgrade krb5Upgrade krb5-libs | Oct 8, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade krb5-clientUpgrade krb5Upgrade krb5-libsUpgrade krb5-server | Oct 9, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-libsUpgrade krb5-develUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstation | Jan 21, 2025 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5Upgrade krb5-clientUpgrade krb5-serverUpgrade krb5-libs | Oct 8, 2024 | Jun 28, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.40Upgrade to MySQL version 9.1.0Upgrade to MySQL version 8.4.3 | Jan 22, 2025 | Jun 28, 2024 |
| Oracle_linux | — | Upgrade mysql-commonUpgrade krb5-serverUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecab-ipadicUpgrade mysqlUpgrade mecabUpgrade krb5-libsUpgrade mysql-develUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade mecab-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade krb5-devel | Oct 16, 2024 | Jun 27, 2024 |
| Redhat_linux | — | Upgrade mecab-develUpgrade krb5-pkinitUpgrade mysql-develUpgrade krb5-debugsourceUpgrade krb5-libs-debuginfoUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstationUpgrade mysql-server-debuginfoUpgrade krb5-workstation-debuginfoUpgrade mecab-debugsourceUpgrade krb5-serverUpgrade mecab-ipadicUpgrade krb5-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-serverUpgrade mysql-libsUpgrade krb5-server-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-testUpgrade krb5-pkinit-debuginfoUpgrade mecab-debuginfoUpgrade mysql-debugsourceUpgrade libkadm5Upgrade mysql-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-libsUpgrade mysql-errmsgUpgrade mysql-libs-debuginfoUpgrade mecabUpgrade mysqlNo solution existsUpgrade krb5-devel-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-common | Jul 24, 2024 | Jun 28, 2024 |
| Rocky_linux | — | Upgrade krb5-workstationUpgrade libkadm5-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade mysql-libsUpgrade mecab-debuginfoUpgrade mysql-commonUpgrade krb5-libs-debuginfoUpgrade mysql-test-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade libkadm5Upgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade krb5-serverUpgrade mysql-errmsgUpgrade krb5-server-debuginfoUpgrade krb5-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecabUpgrade krb5-devel-debuginfoUpgrade krb5-develUpgrade mysql-testUpgrade krb5-pkinitUpgrade mysql-server-debuginfoUpgrade mysql-serverUpgrade krb5-debugsourceUpgrade krb5-workstation-debuginfoUpgrade mysql-develUpgrade mysql-debugsourceUpgrade mysql-devel-debuginfoUpgrade mecab-debugsourceUpgrade mysqlUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade mecab-devel | Feb 27, 2025 | Jun 28, 2024 |
| Suse | — | Upgrade krb5-32bitUpgrade krb5-clientUpgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-preauth-spakeUpgrade krb5Upgrade krb5-docUpgrade krb5-devel-32bitUpgrade krb5-develUpgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-server | Jul 9, 2024 | Jun 28, 2024 |
| Ubuntu | — | Upgrade libkadm5clnt-mit11 (Ubuntu Pro)Upgrade libkrad0 (Ubuntu Pro)Upgrade libkdb5-10Upgrade libkdb5-9 (Ubuntu Pro)Upgrade krb5-pkinit (Ubuntu Pro)Upgrade libkadm5clnt-mit9 (Ubuntu Pro)Upgrade libkrb5-3Upgrade libkadm5clnt-mit11Upgrade libkdb5-9Upgrade libkrb5support0Upgrade krb5-admin-serverUpgrade libgssrpc4 (Ubuntu Pro)Upgrade krb5-pkinitUpgrade libkdb5-7 (Ubuntu Pro)Upgrade libkadm5srv-mit12Upgrade libkdb5-10t64Upgrade libgssrpc4t64Upgrade krb5-admin-server (Ubuntu Pro)Upgrade libkadm5clnt-mit12Upgrade libgssrpc4Upgrade libkrb5support0 (Ubuntu Pro)Upgrade krb5-userUpgrade libkdb5-8 (Ubuntu Pro)Upgrade libkadm5srv-mit11Upgrade libkrad0Upgrade libgssapi-krb5-2 (Ubuntu Pro)Upgrade krb5-otpUpgrade krb5-kdc-ldapUpgrade libk5crypto3Upgrade libgssapi-krb5-2Upgrade libkadm5srv-mit8 (Ubuntu Pro)Upgrade krb5-kdc (Ubuntu Pro)Upgrade krb5-user (Ubuntu Pro)Upgrade krb5-kdc-ldap (Ubuntu Pro)Upgrade libkrb5-3 (Ubuntu Pro)Upgrade libkadm5srv-mit9 (Ubuntu Pro)Upgrade krb5-kdcUpgrade libkadm5srv-mit11 (Ubuntu Pro)Upgrade libk5crypto3 (Ubuntu Pro)Upgrade krb5-otp (Ubuntu Pro) | Aug 9, 2024 | Jun 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub