Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 13, 2017 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Sep 13, 2017 |
| Freebsd | — | Upgrade krb5-develUpgrade krb5-114Upgrade krb5-115Upgrade krb5Upgrade krb5-113 | Oct 18, 2017 | Oct 18, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-pkinit | Sep 12, 2019 | Sep 13, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade krb5-libsUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-server | Sep 25, 2019 | Sep 13, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-develUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-workstation | Nov 19, 2019 | Sep 13, 2017 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3Upgrade security/kerberos-5/kdc to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3 | Aug 24, 2018 | Sep 13, 2017 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 28, 2017 |
| Suse | — | Upgrade krb5-clientUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-devel-32bitUpgrade krb5-x86Upgrade krb5-develUpgrade krb5Upgrade krb5-docUpgrade krb5-apps-serversUpgrade krb5-plugin-kdb-ldapUpgrade krb5-serverUpgrade krb5-32bitUpgrade krb5-apps-clientsUpgrade krb5-plugin-preauth-otp | Oct 9, 2017 | Sep 13, 2017 |
| Ubuntu | — | Upgrade krb5 | Nov 19, 2024 | Sep 13, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub