The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-develUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-server-ldap | May 4, 2022 | Aug 23, 2021 |
| Alpine Linux | — | Upgrade krb5 | Mar 26, 2024 | Aug 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade krb5-serverUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-devel | Jul 4, 2022 | Aug 23, 2021 |
| Centos_linux | — | Upgrade krb5-debuginfoUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-devel-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-debugsourceUpgrade krb5-libs-debuginfoUpgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-serverUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-server-ldap | Sep 22, 2021 | Aug 23, 2021 |
| Debian | — | Upgrade krb5 | Nov 29, 2021 | Aug 23, 2021 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | May 6, 2024 | Aug 23, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade krb5-develUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-server | Feb 24, 2022 | Aug 23, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinitUpgrade libkadm5 | Nov 12, 2021 | Aug 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-devel | Nov 2, 2021 | Aug 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5Upgrade krb5-clientUpgrade krb5-libsUpgrade krb5-server | Nov 12, 2021 | Aug 23, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-serverUpgrade libkadm5 | Sep 23, 2021 | Aug 19, 2021 |
| Redhat_linux | — | Upgrade libkadm5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-debugsourceUpgrade krb5-devel-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-libs-debuginfoUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-workstation-debuginfoUpgrade krb5-serverUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-devel | Sep 22, 2021 | Aug 23, 2021 |
| Rocky_linux | — | Upgrade libkadm5-debuginfoUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-pkinitUpgrade krb5-devel-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap | May 5, 2022 | Aug 23, 2021 |
| Suse | — | Upgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5-clientUpgrade krb5-plugin-preauth-otpUpgrade krb5-32bitUpgrade krb5-miniUpgrade krb5-plugin-kdb-ldapUpgrade krb5-mini-develUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-serverUpgrade krb5 | Oct 19, 2021 | Aug 23, 2021 |
| Ubuntu | — | Upgrade krb5-pkinitUpgrade krb5-kdcUpgrade krb5-k5tlsUpgrade krb5-kdc-ldap | Mar 22, 2023 | Aug 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub