The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-develUpgrade krb5-workstation | Dec 6, 2022 | Nov 28, 2022 |
| Alpine Linux | — | Upgrade krb5Upgrade sambaUpgrade heimdal | Mar 26, 2024 | Dec 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade krb5-serverUpgrade libkadm5Upgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-libs | Jan 24, 2023 | Dec 25, 2022 |
| Amazon_linux | — | Upgrade krb5 | Jan 25, 2023 | Nov 5, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 25, 2022 |
| Centos_linux | — | Upgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-debugsourceUpgrade libkadm5-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-workstation-debuginfoUpgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade krb5-pkinit-opensslUpgrade krb5-server-ldap-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-debuginfo | Nov 29, 2022 | Nov 28, 2022 |
| Debian | — | Upgrade krb5Upgrade sambaUpgrade heimdal | Nov 21, 2022 | Nov 21, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade krb5-119Upgrade krb5-develUpgrade krb5-120Upgrade mysql-connector-odbcUpgrade mysql80-serverUpgrade mysql-connector-jUpgrade mysql57-serverUpgrade mysql-connector-c++Upgrade FreeBSDUpgrade krb5 | Nov 16, 2022 | Nov 15, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba.Upgrade app-crypt/mit-krb5.Upgrade app-crypt/heimdal. | Sep 18, 2023 | Dec 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5Upgrade krb5-client | Feb 13, 2023 | Dec 25, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade libwbclient | Mar 8, 2023 | Dec 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba | Jun 9, 2023 | Dec 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade python2-sambaUpgrade ctdbUpgrade sambaUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-common-toolsUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-testUpgrade samba-libsUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade ctdb-testsUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-pidl | Feb 9, 2023 | Dec 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5Upgrade krb5-client | Jan 9, 2023 | Dec 25, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Apr 11, 2023 |
| Oracle_linux | — | Upgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-develUpgrade libkadm5Upgrade krb5-pkinit-opensslUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-libs | Nov 29, 2022 | Nov 15, 2022 |
| Redhat_linux | — | Upgrade krb5-debugsourceUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-workstationUpgrade libkadm5-debuginfoUpgrade krb5-develUpgrade krb5-devel-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfo | Nov 29, 2022 | Nov 28, 2022 |
| Rocky_linux | — | Upgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-debugsourceUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-pkinit-debuginfoUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-libs-debuginfoUpgrade libkadm5Upgrade libkadm5-debuginfoUpgrade krb5-server-debuginfo | Mar 12, 2024 | Dec 25, 2022 |
| Samba | — | Upgrade to Samba 4.17.3 or later.Upgrade to Samba 4.16.7 or later.Upgrade to Samba 4.15.12 or later. | Dec 25, 2022 | Dec 25, 2022 |
| Suse | — | Upgrade libgssapi3Upgrade libhdb9Upgrade libsamba-policy0-python3Upgrade libsamba-policy0-python3-64bitUpgrade krb5-docUpgrade krb5-32bitUpgrade krb5-devel-32bitUpgrade ctdbUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libhx509-5Upgrade libkrb5-26Upgrade samba-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-python3-64bitUpgrade libheimedit0Upgrade krb5Upgrade libsl0Upgrade krb5-plugin-preauth-spakeUpgrade krb5-clientUpgrade libkadm5clnt7Upgrade krb5-plugin-preauth-otpUpgrade samba-develUpgrade samba-devel-32bitUpgrade libkafs0Upgrade libasn1-8Upgrade libkdc2Upgrade krb5-develUpgrade samba-testUpgrade samba-client-libsUpgrade samba-client-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-ldb-ldapUpgrade sambaUpgrade samba-clientUpgrade libheimntlm0Upgrade samba-ad-dcUpgrade libroken18Upgrade samba-gpupdateUpgrade libsamba-policy-develUpgrade libkadm5srv8Upgrade krb5-plugin-kdb-ldapUpgrade samba-client-64bitUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dc-libs-32bitUpgrade libhcrypto4Upgrade samba-libs-64bitUpgrade samba-winbind-libsUpgrade samba-toolUpgrade libheimdal-develUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-mini-develUpgrade samba-docUpgrade krb5-miniUpgrade samba-cephUpgrade libwind0Upgrade krb5-serverUpgrade samba-ad-dc-libsUpgrade samba-python3Upgrade libotp0Upgrade samba-libs-python3-32bitUpgrade samba-winbindUpgrade libheimbase1Upgrade libsamba-policy-python3-develUpgrade samba-libs-python3 | Nov 22, 2022 | Nov 21, 2022 |
| Ubuntu | — | Upgrade krb5-admin-serverUpgrade libkrb5-26-heimdalUpgrade libasn1-8-heimdal (Ubuntu Pro)Upgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade sambaUpgrade libhx509-5-heimdal (Ubuntu Pro)Upgrade krb5-admin-server (Ubuntu Pro)Upgrade krb5-user (Ubuntu Pro)Upgrade libhx509-5-heimdalUpgrade libkdb5-7 (Ubuntu Pro)Upgrade krb5-kdcUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade krb5-userUpgrade libkdb5-8 (Ubuntu Pro)Upgrade libgssapi-krb5-2Upgrade libgssapi-krb5-2 (Ubuntu Pro)Upgrade libkdb5-10Upgrade libhdb9-heimdalUpgrade krb5-kdc (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade samba (Ubuntu Pro)Upgrade libkdb5-9 | Jan 13, 2023 | Nov 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub