MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Jul 20, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Jul 20, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2015 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade system/kernel/security/gss to version 0.5.11-0.175.2.5.0.1.2 on Solaris 11.2Upgrade service/security/kerberos-5 to version 0.5.11-0.175.2.5.0.3.2 on Solaris 11.2 | May 29, 2017 | Jul 20, 2014 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-workstation | Oct 16, 2024 | Jul 20, 2014 |
| Suse | — | Upgrade krb5-apps-serversUpgrade krb5Upgrade krb5-32bitUpgrade krb5-docUpgrade krb5-serverUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-preauth-otpUpgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5-x86Upgrade krb5-plugin-kdb-ldapUpgrade krb5-apps-clientsUpgrade krb5-client | Dec 18, 2015 | Jul 20, 2014 |
| Ubuntu | — | Upgrade libk5crypto3Upgrade libkadm5srv-mit7Upgrade libkdb5-6Upgrade krb5-userUpgrade libkadm5srv-mit9Upgrade libgssrpc4Upgrade krb5-otpUpgrade libkdb5-4Upgrade libgssapi-krb5-2Upgrade libkadm5clnt-mit8Upgrade krb5-kdc-ldapUpgrade libkadm5clnt-mit9Upgrade libkrb5support0Upgrade libkadm5srv-mit8Upgrade libkadm5clnt-mit7Upgrade libkdb5-7Upgrade krb5-kdcUpgrade krb5-pkinitUpgrade libkrad0Upgrade krb5-admin-serverUpgrade libkrb5-3 | Nov 8, 2024 | Jul 20, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub