MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Jul 20, 2014 |
| Centos_linux | — | Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-workstation | Dec 1, 2016 | Jul 20, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Jul 20, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 10, 2015 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Jul 20, 2014 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade service/security/kerberos-5 to version 0.5.11-0.175.2.5.0.3.2 on Solaris 11.2Upgrade system/kernel/security/gss to version 0.5.11-0.175.2.5.0.1.2 on Solaris 11.2 | May 29, 2017 | Jul 20, 2014 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-devel | Oct 16, 2024 | Jul 20, 2014 |
| Suse | — | Upgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-x86Upgrade krb5-devel-32bitUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-apps-serversUpgrade krb5-clientUpgrade krb5-32bitUpgrade krb5-docUpgrade krb5Upgrade krb5-plugin-preauth-otpUpgrade krb5-apps-clients | Dec 18, 2015 | Jul 20, 2014 |
| Ubuntu | — | Upgrade krb5-pkinitUpgrade krb5-admin-serverUpgrade libkadm5srv-mit9Upgrade libkadm5srv-mit8Upgrade libkadm5srv-mit7Upgrade libkdb5-7Upgrade libkrad0Upgrade libk5crypto3Upgrade libkadm5clnt-mit9Upgrade libkadm5clnt-mit7Upgrade krb5-kdcUpgrade libkrb5-3Upgrade libgssrpc4Upgrade krb5-otpUpgrade libkadm5clnt-mit8Upgrade krb5-kdc-ldapUpgrade libgssapi-krb5-2Upgrade libkdb5-4Upgrade krb5-userUpgrade libkrb5support0Upgrade libkdb5-6 | Nov 8, 2024 | Jul 20, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub