The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Upgrade macOS to the latest versionApply OS X security update 2011-001Apply OS X security update 2011-004 | Aug 28, 2015 | Dec 2, 2010 |
| Apple Osx Kerberos | — | Upgrade macOS to the latest versionApply OS X security update 2011-001 | Dec 16, 2011 | Dec 2, 2010 |
| Centos_linux | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-workstation | Dec 1, 2016 | Dec 2, 2010 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Dec 2, 2010 |
| Freebsd | — | Upgrade krb5 | Dec 10, 2025 | Dec 9, 2010 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Dec 2, 2010 |
| Hpux | — | Update krb5client.KRB5IA32SLIB-A to the latest versionUpdate krb5client.KRB5-PRG-A to the latest versionUpdate krb5client.KRB5-SHLIB-A to the latest versionUpdate krb5client.KRB5-64SLIB-A to the latest versionUpdate krb5client.KRB5IA64SLIB-A to the latest versionApply patch PHSS_41775 from HPUpdate krb5client.KRB5-RUN-A to the latest version | Aug 11, 2017 | Dec 2, 2010 |
| Oracle Solaris | — | Upgrade system/kernel/security/gss to version 0.5.11-0.175.1.11.0.3.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2 | May 29, 2017 | Dec 2, 2010 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-devel | Oct 16, 2024 | Dec 2, 2010 |
| Suse | — | Upgrade krb5-clientUpgrade krb5-32bitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-spakeUpgrade krb5-plugin-preauth-otpUpgrade krb5-apps-clientsUpgrade krb5Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-x86Upgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5-serverUpgrade krb5-docUpgrade krb5-apps-servers | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libkrb5-3Upgrade libkrb53 | Nov 8, 2024 | Dec 2, 2010 |
| Vmsa 2011 0007 | — | Upgrade VMware ESXi 4.1 to build number 381591Upgrade VMware ESX 4.1 to build number 381591 | May 12, 2011 | Apr 28, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Dec 2, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub