In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-debuginfoUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-libs | Apr 27, 2020 | Aug 9, 2017 |
| Amazon_linux | — | Upgrade krb5 | Sep 7, 2018 | Aug 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 9, 2017 |
| Centos_linux | — | Upgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-libs | Aug 28, 2019 | Aug 9, 2017 |
| Debian | — | Upgrade krb5 | Feb 25, 2019 | Aug 9, 2017 |
| Freebsd | — | Upgrade krb5-114Upgrade krb5-develUpgrade krb5-113Upgrade krb5-115Upgrade krb5 | Oct 18, 2017 | Oct 18, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-devel | Nov 6, 2018 | Aug 9, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade libkadm5 | Nov 8, 2018 | Aug 9, 2017 |
| Oracle Solaris | — | Upgrade security/kerberos-5/kdc to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3Upgrade security/kerberos-5 to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3 | Aug 24, 2018 | Aug 9, 2017 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-libsUpgrade libkadm5 | Apr 19, 2018 | Jul 13, 2017 |
| Redhat_linux | — | Upgrade krb5-develUpgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-pkinitNo solution existsUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-serverUpgrade libkadm5 | Apr 11, 2018 | Aug 9, 2017 |
| Suse | — | Upgrade krb5Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-serverUpgrade krb5-plugin-preauth-otpUpgrade krb5-32bitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-clientUpgrade krb5-devel | May 19, 2018 | Aug 9, 2017 |
| Ubuntu | — | Upgrade krb5 | Nov 19, 2024 | Aug 9, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub