ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-pkinit | May 4, 2022 | Jul 22, 2021 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jul 22, 2021 |
| Centos_linux | — | Upgrade krb5-workstation-debuginfoUpgrade libkadm5Upgrade krb5-develUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstationUpgrade krb5-debugsourceUpgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade krb5-libsUpgrade krb5-server-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-devel-debuginfo | Sep 22, 2021 | Jul 22, 2021 |
| Debian | — | Upgrade krb5 | Jul 26, 2021 | Jul 22, 2021 |
| Freebsd | — | Upgrade mysql57-serverUpgrade mysql-connector-javaUpgrade mariadb104-serverUpgrade mysql80-serverUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mysql80-client | Nov 4, 2022 | Oct 17, 2021 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | May 6, 2024 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-server-ldap | Sep 24, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-clientUpgrade krb5Upgrade krb5-serverUpgrade krb5-libs | Nov 12, 2021 | Jul 22, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.27 | Jun 15, 2026 | Jul 22, 2021 |
| Oracle Solaris | — | Upgrade security/kerberos-5 to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4Upgrade security/kerberos-5/kdc to version 1.18.4.0-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Jul 22, 2021 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-workstation | Sep 23, 2021 | Jul 12, 2021 |
| Redhat_linux | — | Upgrade libkadm5-debuginfoUpgrade krb5-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-server-ldapUpgrade krb5-pkinit-debuginfoUpgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-develUpgrade krb5-server-debuginfoUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinitUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade krb5-workstationNo solution exists | Sep 22, 2021 | Jul 22, 2021 |
| Rocky_linux | — | Upgrade krb5-debugsourceUpgrade krb5-libsUpgrade krb5-devel-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-serverUpgrade krb5-server-debuginfoUpgrade krb5-debuginfoUpgrade krb5-libs-debuginfoUpgrade libkadm5Upgrade krb5-develUpgrade libkadm5-debuginfoUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-workstation | Mar 12, 2024 | Jul 22, 2021 |
| Suse | — | Upgrade apparmor-docsUpgrade samba-client-32bitUpgrade sssd-dbusUpgrade libapparmor1-32bitUpgrade krb5-32bitUpgrade libtalloc-develUpgrade samba-libs-python3-64bitUpgrade sssd-wbclientUpgrade prometheus-postgres_exporterUpgrade samba-clientUpgrade apache2-mod_apparmorUpgrade libsss_certmap-develUpgrade samba-ldb-ldapUpgrade python3-talloc-develUpgrade samba-python3Upgrade samba-winbind-libsUpgrade libipa_hbac0Upgrade ctdb-pcp-pmdaUpgrade samba-ad-dc-libs-32bitUpgrade samba-toolUpgrade krb5Upgrade samba-libs-64bitUpgrade libsamba-policy-python3-develUpgrade samba-client-libs-32bitUpgrade libtevent0Upgrade samba-docUpgrade python3-teventUpgrade libsamba-policy0-python3Upgrade libtdb1Upgrade libtevent-develUpgrade python3-sss-murmurUpgrade ruby-apparmorUpgrade krb5-plugin-kdb-ldapUpgrade python3-rhnlibUpgrade apparmor-parserUpgrade samba-libs-python3-32bitUpgrade python3-talloc-32bitUpgrade talloc-manUpgrade golang-github-boynux-squid_exporterUpgrade krb5-plugin-preauth-spakeUpgrade sssd-commonUpgrade libapparmor1Upgrade libnfsidmap-sssUpgrade samba-client-libsUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-serverUpgrade python3-tallocUpgrade python3-ldbUpgrade python3-tdb-32bitUpgrade sssd-ipaUpgrade sssd-proxyUpgrade krb5-plugin-preauth-otpUpgrade libsss_idmap-develUpgrade golang-github-prometheus-node_exporterUpgrade libtalloc2-32bitUpgrade sssd-winbind-idmapUpgrade samba-ad-dc-libsUpgrade golang-github-prometheus-promuUpgrade libsss_simpleifp0Upgrade prometheus-blackbox_exporterUpgrade python3-ldb-develUpgrade python3-tdbUpgrade python3-apparmorUpgrade libsamba-policy-develUpgrade samba-libsUpgrade python3-tevent-32bitUpgrade samba-client-64bitUpgrade libsss_simpleifp-develUpgrade python3-ldb-32bitUpgrade tevent-manUpgrade sssd-krb5Upgrade wireUpgrade samba-dsdb-modulesUpgrade libtdb-develUpgrade samba-winbind-libs-32bitUpgrade libldb2Upgrade libldb-develUpgrade libsss_idmap0Upgrade samba-gpupdateUpgrade ctdbUpgrade apparmor-profilesUpgrade samba-libs-32bitUpgrade samba-cephUpgrade libsamba-policy0-python3-64bitUpgrade python3-ipa_hbacUpgrade dracut-saltbootUpgrade apparmor-parser-langUpgrade samba-ad-dcUpgrade libsss_nss_idmap0Upgrade samba-winbindUpgrade libipa_hbac-develUpgrade pam_apparmorUpgrade libsss_certmap0Upgrade libtalloc2Upgrade spacecmdUpgrade samba-devel-32bitUpgrade krb5-miniUpgrade libldb2-32bitUpgrade libtdb1-32bitUpgrade pam_apparmor-32bitUpgrade samba-develUpgrade samba-testUpgrade apparmor-utilsUpgrade samba-libs-python3Upgrade tdb-toolsUpgrade krb5-mini-develUpgrade krb5-develUpgrade grafanaUpgrade krb5-devel-32bitUpgrade libapparmor-develUpgrade sssd-toolsUpgrade sssd-ldapUpgrade sambaUpgrade sssd-adUpgrade sssdUpgrade krb5-clientUpgrade ldb-toolsUpgrade apparmor-abstractionsUpgrade apparmor-utils-langUpgrade libtevent0-32bitUpgrade python3-sssd-configUpgrade libsss_nss_idmap-develUpgrade sssd-wbclient-develUpgrade sssd-krb5-commonUpgrade python3-sss_nss_idmapUpgrade libsamba-policy0-python3-32bitUpgrade perl-apparmor | Aug 21, 2021 | Jul 22, 2021 |
| Ubuntu | — | Upgrade krb5-kdcUpgrade krb5-pkinitUpgrade krb5-k5tlsUpgrade krb5-kdc-ldap | Mar 22, 2023 | Jul 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub