MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Jul 20, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Jul 20, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2015 |
| Oracle Solaris | — | Upgrade service/security/kerberos-5 to version 0.5.11-0.175.2.5.0.3.2 on Solaris 11.2Upgrade system/kernel/security/gss to version 0.5.11-0.175.2.5.0.1.2 on Solaris 11.2Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Jul 20, 2014 |
| Oracle_linux | — | Upgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-server | Oct 16, 2024 | Jul 20, 2014 |
| Suse | — | Upgrade krb5-apps-serversUpgrade krb5-serverUpgrade krb5Upgrade krb5-32bitUpgrade krb5-docUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-x86Upgrade krb5-plugin-kdb-ldapUpgrade krb5-develUpgrade krb5-plugin-preauth-otpUpgrade krb5-apps-clientsUpgrade krb5-devel-32bitUpgrade krb5-client | Dec 18, 2015 | Jul 20, 2014 |
| Ubuntu | — | Upgrade krb5-pkinitUpgrade libkrb5-3Upgrade libkrb5support0Upgrade krb5-admin-serverUpgrade libkdb5-7Upgrade krb5-kdcUpgrade libkadm5srv-mit8Upgrade libkrad0Upgrade libkadm5clnt-mit7Upgrade krb5-otpUpgrade libk5crypto3Upgrade krb5-kdc-ldapUpgrade libgssapi-krb5-2Upgrade libkadm5clnt-mit8Upgrade libkadm5clnt-mit9Upgrade libkadm5srv-mit9Upgrade libkdb5-6Upgrade libgssrpc4Upgrade krb5-userUpgrade libkdb5-4Upgrade libkadm5srv-mit7 | Nov 8, 2024 | Jul 20, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub