The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libkadm5Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-server-ldap | Apr 27, 2020 | Mar 6, 2018 |
| Amazon_linux | — | Upgrade krb5 | Jan 25, 2019 | Mar 6, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2018 |
| Centos_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade krb5-devel | Aug 28, 2019 | Mar 6, 2018 |
| Debian | — | Upgrade krb5 | Feb 20, 2019 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade krb5-libsUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-pkinit | Dec 31, 2018 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-server | Dec 11, 2018 | Mar 6, 2018 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3Upgrade security/kerberos-5/kdc to version 1.16.1.0-0.175.3.35.0.4.0 on Solaris 11.3 | Aug 24, 2018 | Mar 6, 2018 |
| Oracle_linux | — | Upgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-server | Nov 6, 2018 | Mar 1, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Mar 1, 2018 |
| Redhat_linux | — | Upgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-workstationNo solution existsUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinit | Oct 31, 2018 | Mar 6, 2018 |
| Suse | — | Upgrade krb5-docUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-apps-serversUpgrade krb5Upgrade krb5-32bitUpgrade krb5-mini-develUpgrade krb5-clientUpgrade krb5-miniUpgrade krb5-x86Upgrade krb5-plugin-kdb-ldapUpgrade krb5-devel-32bitUpgrade krb5-plugin-preauth-otpUpgrade krb5-develUpgrade krb5-apps-clientsUpgrade krb5-server | Mar 30, 2018 | Mar 6, 2018 |
| Ubuntu | — | Upgrade krb5 | Nov 19, 2024 | Mar 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub