MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade krb5 | Aug 30, 2017 | Jul 20, 2014 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Jul 20, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2015 |
| Oracle Solaris | — | Upgrade system/kernel/security/gss to version 0.5.11-0.175.2.5.0.1.2 on Solaris 11.2Upgrade service/security/kerberos-5 to version 0.5.11-0.175.2.5.0.3.2 on Solaris 11.2Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Jul 20, 2014 |
| Oracle_linux | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-devel | Oct 16, 2024 | Jul 20, 2014 |
| Suse | — | Upgrade krb5-x86Upgrade krb5-clientUpgrade krb5-develUpgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-otpUpgrade krb5-devel-32bitUpgrade krb5-apps-clientsUpgrade krb5-docUpgrade krb5-apps-serversUpgrade krb5-serverUpgrade krb5Upgrade krb5-32bitUpgrade krb5-plugin-preauth-pkinit | Dec 18, 2015 | Jul 20, 2014 |
| Ubuntu | — | Upgrade libkadm5srv-mit9Upgrade libgssapi-krb5-2Upgrade krb5-otpUpgrade libk5crypto3Upgrade libkdb5-4Upgrade krb5-userUpgrade libkadm5clnt-mit9Upgrade libgssrpc4Upgrade krb5-kdc-ldapUpgrade libkdb5-6Upgrade libkadm5srv-mit7Upgrade libkadm5clnt-mit8Upgrade libkrb5support0Upgrade krb5-admin-serverUpgrade libkrad0Upgrade libkadm5clnt-mit7Upgrade krb5-kdcUpgrade libkadm5srv-mit8Upgrade libkdb5-7Upgrade libkrb5-3Upgrade krb5-pkinit | Nov 8, 2024 | Jul 20, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub