The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-krb5-develalma-upgrade-krb5-libsalma-upgrade-krb5-pkinitalma-upgrade-krb5-serveralma-upgrade-krb5-server-ldapalma-upgrade-krb5-workstationalma-upgrade-libkadm5 | May 4, 2022 | Aug 23, 2021 | |
| Alpine Linux | alpine-linux-upgrade-krb5 | Mar 26, 2024 | Aug 23, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-krb5-debuginfoamazon-linux-ami-2-upgrade-krb5-develamazon-linux-ami-2-upgrade-krb5-libsamazon-linux-ami-2-upgrade-krb5-pkinitamazon-linux-ami-2-upgrade-krb5-serveramazon-linux-ami-2-upgrade-krb5-server-ldapamazon-linux-ami-2-upgrade-krb5-workstationamazon-linux-ami-2-upgrade-libkadm5 | Jul 4, 2022 | Aug 23, 2021 | |
| Centos_linux | — | centos-upgrade-krb5-debuginfocentos-upgrade-krb5-debugsourcecentos-upgrade-krb5-develcentos-upgrade-krb5-devel-debuginfocentos-upgrade-krb5-libscentos-upgrade-krb5-libs-debuginfocentos-upgrade-krb5-pkinitcentos-upgrade-krb5-pkinit-debuginfocentos-upgrade-krb5-servercentos-upgrade-krb5-server-debuginfocentos-upgrade-krb5-server-ldapcentos-upgrade-krb5-server-ldap-debuginfocentos-upgrade-krb5-workstationcentos-upgrade-krb5-workstation-debuginfocentos-upgrade-libkadm5centos-upgrade-libkadm5-debuginfo | Sep 22, 2021 | Aug 23, 2021 |
| Debian | debian-upgrade-krb5 | Nov 29, 2021 | Aug 23, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-crypt-mit-krb5 | May 6, 2024 | Aug 23, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-krb5-develhuawei-euleros-2_0_sp3-upgrade-krb5-libshuawei-euleros-2_0_sp3-upgrade-krb5-pkinithuawei-euleros-2_0_sp3-upgrade-krb5-serverhuawei-euleros-2_0_sp3-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp3-upgrade-krb5-workstationhuawei-euleros-2_0_sp3-upgrade-libkadm5 | Feb 24, 2022 | Aug 23, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-krb5-develhuawei-euleros-2_0_sp5-upgrade-krb5-libshuawei-euleros-2_0_sp5-upgrade-krb5-pkinithuawei-euleros-2_0_sp5-upgrade-krb5-serverhuawei-euleros-2_0_sp5-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp5-upgrade-krb5-workstationhuawei-euleros-2_0_sp5-upgrade-libkadm5 | Nov 12, 2021 | Aug 23, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-krb5-develhuawei-euleros-2_0_sp8-upgrade-krb5-libshuawei-euleros-2_0_sp8-upgrade-krb5-pkinithuawei-euleros-2_0_sp8-upgrade-krb5-serverhuawei-euleros-2_0_sp8-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp8-upgrade-krb5-workstationhuawei-euleros-2_0_sp8-upgrade-libkadm5 | Nov 2, 2021 | Aug 23, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-krb5huawei-euleros-2_0_sp9-upgrade-krb5-clienthuawei-euleros-2_0_sp9-upgrade-krb5-libshuawei-euleros-2_0_sp9-upgrade-krb5-server | Nov 12, 2021 | Aug 23, 2021 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-krb5-develoracle-linux-upgrade-krb5-libsoracle-linux-upgrade-krb5-pkinitoracle-linux-upgrade-krb5-serveroracle-linux-upgrade-krb5-server-ldaporacle-linux-upgrade-krb5-workstationoracle-linux-upgrade-libkadm5 | Sep 23, 2021 | Aug 19, 2021 |
| Redhat_linux | redhat-upgrade-krb5-debuginforedhat-upgrade-krb5-debugsourceredhat-upgrade-krb5-develredhat-upgrade-krb5-devel-debuginforedhat-upgrade-krb5-libsredhat-upgrade-krb5-libs-debuginforedhat-upgrade-krb5-pkinitredhat-upgrade-krb5-pkinit-debuginforedhat-upgrade-krb5-serverredhat-upgrade-krb5-server-debuginforedhat-upgrade-krb5-server-ldapredhat-upgrade-krb5-server-ldap-debuginforedhat-upgrade-krb5-workstationredhat-upgrade-krb5-workstation-debuginforedhat-upgrade-libkadm5redhat-upgrade-libkadm5-debuginfo | Sep 22, 2021 | Aug 23, 2021 | |
| Rocky_linux | rocky-upgrade-krb5-debuginforocky-upgrade-krb5-debugsourcerocky-upgrade-krb5-develrocky-upgrade-krb5-devel-debuginforocky-upgrade-krb5-libsrocky-upgrade-krb5-libs-debuginforocky-upgrade-krb5-pkinitrocky-upgrade-krb5-pkinit-debuginforocky-upgrade-krb5-serverrocky-upgrade-krb5-server-debuginforocky-upgrade-krb5-server-ldaprocky-upgrade-krb5-server-ldap-debuginforocky-upgrade-krb5-workstationrocky-upgrade-krb5-workstation-debuginforocky-upgrade-libkadm5rocky-upgrade-libkadm5-debuginfo | May 5, 2022 | Aug 23, 2021 | |
| Suse | — | suse-upgrade-krb5suse-upgrade-krb5-32bitsuse-upgrade-krb5-clientsuse-upgrade-krb5-develsuse-upgrade-krb5-devel-32bitsuse-upgrade-krb5-minisuse-upgrade-krb5-mini-develsuse-upgrade-krb5-plugin-kdb-ldapsuse-upgrade-krb5-plugin-preauth-otpsuse-upgrade-krb5-plugin-preauth-pkinitsuse-upgrade-krb5-server | Oct 19, 2021 | Aug 23, 2021 |
| Ubuntu | ubuntu-upgrade-krb5-k5tlsubuntu-upgrade-krb5-kdcubuntu-upgrade-krb5-kdc-ldapubuntu-upgrade-krb5-pkinit | Mar 22, 2023 | Aug 23, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub