ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-devel | May 4, 2022 | Jul 22, 2021 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jul 22, 2021 |
| Centos_linux | — | Upgrade krb5-libs-debuginfoUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-debugsourceUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-libsUpgrade krb5-devel-debuginfo | Sep 22, 2021 | Jul 22, 2021 |
| Debian | — | Upgrade krb5 | Jul 26, 2021 | Jul 22, 2021 |
| Freebsd | — | Upgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mysql80-clientUpgrade mysql-connector-javaUpgrade mysql57-serverUpgrade mariadb104-serverUpgrade mysql80-server | Nov 4, 2022 | Oct 17, 2021 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | May 6, 2024 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-server-ldap | Sep 24, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5Upgrade krb5-client | Nov 12, 2021 | Jul 22, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Jun 15, 2026 | Jul 22, 2021 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4Upgrade security/kerberos-5/kdc to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Jul 22, 2021 |
| Oracle_linux | — | Upgrade krb5-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-workstation | Sep 23, 2021 | Jul 12, 2021 |
| Redhat_linux | — | Upgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-server-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-workstationUpgrade krb5-libs-debuginfoUpgrade krb5-develUpgrade krb5-libsNo solution existsUpgrade libkadm5Upgrade krb5-pkinit-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-debugsource | Sep 22, 2021 | Jul 22, 2021 |
| Rocky_linux | — | Upgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-libsUpgrade krb5-debugsourceUpgrade krb5-pkinit-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade krb5-libs-debuginfoUpgrade krb5-debuginfoUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-develUpgrade krb5-server-debuginfoUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-server-ldap | Mar 12, 2024 | Jul 22, 2021 |
| Suse | — | Upgrade dracut-saltbootUpgrade libsamba-policy0-python3-64bitUpgrade samba-libs-32bitUpgrade libsss_nss_idmap-develUpgrade apparmor-utilsUpgrade samba-cephUpgrade krb5-mini-develUpgrade libsss_simpleifp-develUpgrade wireUpgrade sssd-krb5Upgrade python3-ipa_hbacUpgrade libtevent0-32bitUpgrade samba-client-64bitUpgrade samba-ad-dcUpgrade apparmor-parser-langUpgrade pam_apparmorUpgrade krb5-devel-32bitUpgrade sssd-adUpgrade krb5-develUpgrade python3-ldb-32bitUpgrade libapparmor-develUpgrade libtdb-develUpgrade python3-tevent-32bitUpgrade perl-apparmorUpgrade sssd-wbclient-develUpgrade grafanaUpgrade tevent-manUpgrade samba-gpupdateUpgrade ctdbUpgrade libsamba-policy0-python3-32bitUpgrade sssd-ldapUpgrade apparmor-abstractionsUpgrade sssd-krb5-commonUpgrade libsss_idmap0Upgrade libsss_nss_idmap0Upgrade samba-libs-python3Upgrade sssd-toolsUpgrade apparmor-profilesUpgrade python3-sss_nss_idmapUpgrade ldb-toolsUpgrade tdb-toolsUpgrade sambaUpgrade apparmor-utils-langUpgrade python3-sssd-configUpgrade libsss_certmap0Upgrade libipa_hbac-develUpgrade krb5-miniUpgrade pam_apparmor-32bitUpgrade libtdb1-32bitUpgrade samba-devel-32bitUpgrade libldb2-32bitUpgrade samba-testUpgrade samba-winbind-libs-32bitUpgrade libtalloc2Upgrade libldb2Upgrade samba-dsdb-modulesUpgrade libldb-develUpgrade samba-winbindUpgrade krb5-clientUpgrade spacecmdUpgrade samba-develUpgrade sssdUpgrade samba-client-libs-32bitUpgrade sssd-wbclientUpgrade prometheus-postgres_exporterUpgrade samba-ldb-ldapUpgrade samba-client-32bitUpgrade python3-ldb-develUpgrade samba-libsUpgrade samba-libs-python3-32bitUpgrade ruby-apparmorUpgrade libipa_hbac0Upgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade libtdb1Upgrade samba-winbind-libsUpgrade python3-talloc-develUpgrade samba-clientUpgrade python3-apparmorUpgrade libsss_certmap-develUpgrade apparmor-docsUpgrade apache2-mod_apparmorUpgrade krb5-serverUpgrade samba-libs-python3-64bitUpgrade python3-rhnlibUpgrade python3-ldbUpgrade python3-sss-murmurUpgrade golang-github-boynux-squid_exporterUpgrade sssd-proxyUpgrade krb5-32bitUpgrade sssd-winbind-idmapUpgrade golang-github-prometheus-node_exporterUpgrade libsamba-policy-python3-develUpgrade libtevent-develUpgrade samba-ad-dc-libsUpgrade python3-teventUpgrade samba-client-libsUpgrade libnfsidmap-sssUpgrade libapparmor1Upgrade sssd-ipaUpgrade python3-tallocUpgrade sssd-dbusUpgrade sssd-commonUpgrade python3-tdb-32bitUpgrade libsamba-policy0-python3Upgrade python3-talloc-32bitUpgrade apparmor-parserUpgrade talloc-manUpgrade libsss_simpleifp0Upgrade libtalloc2-32bitUpgrade libsss_idmap-develUpgrade prometheus-blackbox_exporterUpgrade python3-tdbUpgrade libapparmor1-32bitUpgrade krb5-plugin-preauth-spakeUpgrade libtalloc-develUpgrade krb5-plugin-preauth-pkinitUpgrade golang-github-prometheus-promuUpgrade samba-libs-64bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-docUpgrade krb5-plugin-preauth-otpUpgrade libsamba-policy-develUpgrade samba-toolUpgrade libtevent0Upgrade krb5-plugin-kdb-ldapUpgrade krb5 | Aug 21, 2021 | Jul 22, 2021 |
| Ubuntu | — | Upgrade krb5-kdcUpgrade krb5-pkinitUpgrade krb5-kdc-ldapUpgrade krb5-k5tls | Mar 22, 2023 | Jul 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub