Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Kerberos | — | Apply OS X security update 2008-002 | Dec 16, 2011 | Dec 5, 2007 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Dec 6, 2007 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Dec 5, 2007 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-workstation | Oct 16, 2024 | Dec 6, 2007 |
| Suse | — | Upgrade krb5-plugin-kdb-ldapUpgrade krb5-x86Upgrade krb5-develUpgrade krb5-apps-clientsUpgrade krb5-serverUpgrade krb5-plugin-preauth-otpUpgrade krb5-devel-32bitUpgrade krb5Upgrade krb5-clientUpgrade krb5-32bitUpgrade krb5-plugin-preauth-spakeUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-apps-servers | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade krb5-kdcUpgrade libkrb53Upgrade krb5-admin-server | Nov 8, 2024 | Dec 6, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub