The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Kerberos | — | Apply OS X security update 2005-007 | Dec 16, 2011 | Dec 31, 2004 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Dec 31, 2004 |
| Freebsd | — | Upgrade krb5-betaUpgrade krb5 | Dec 10, 2025 | Dec 21, 2004 |
| Ubuntu | — | Upgrade libkrb53Upgrade krb5-kdc | Nov 8, 2024 | Dec 31, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub