The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Nov 8, 2015 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | May 25, 2015 |
| Freebsd | — | Upgrade krb5Upgrade krb5-112 | Dec 10, 2025 | May 28, 2015 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-server | Oct 16, 2024 | May 25, 2015 |
| Suse | — | Upgrade krb5-serverUpgrade krb5-plugin-kdb-ldapUpgrade krb5-develUpgrade krb5-docUpgrade krb5Upgrade krb5-clientUpgrade krb5-plugin-preauth-otpUpgrade krb5-32bitUpgrade krb5-plugin-preauth-pkinit | Dec 18, 2015 | May 25, 2015 |
| Ubuntu | — | Upgrade libkadm5clnt-mit9Upgrade krb5-userUpgrade libkrb53Upgrade krb5-admin-serverUpgrade krb5-k5tlsUpgrade libkdb5-7Upgrade libk5crypto3Upgrade libgssrpc4Upgrade krb5-kdc-ldapUpgrade libkadm5clnt-mit8Upgrade libkrb5support0Upgrade libkdb5-6Upgrade krb5-pkinitUpgrade krb5-kdcUpgrade krb5-otpUpgrade libkrb5-3Upgrade libkrad0Upgrade libkdb5-8Upgrade libgssapi-krb5-2 | Nov 16, 2015 | May 25, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub