Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-pkinitUpgrade libkadm5 | May 31, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-debuginfoUpgrade krb5-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-devel | Apr 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-workstation-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Feb 29, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Oracle_linux | — | Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-develUpgrade libkadm5 | May 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade krb5-server-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-workstation-debuginfoUpgrade libkadm5Upgrade krb5-pkinit-debuginfoUpgrade krb5-libsUpgrade krb5-develUpgrade libkadm5-debuginfoNo solution existsUpgrade krb5-devel-debuginfoUpgrade krb5-debugsource | May 23, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-devel-debuginfoUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-libs-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-debugsourceUpgrade krb5-workstationUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-server-ldap-debuginfoUpgrade krb5-server-ldap | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-otpUpgrade krb5-serverUpgrade krb5Upgrade krb5-docUpgrade krb5-devel-32bitUpgrade krb5-develUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-clientUpgrade krb5-32bitUpgrade krb5-plugin-preauth-spake | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade libgssrpc4Upgrade libgssapi-krb5-2Upgrade libkdb5-9Upgrade libkdb5-10Upgrade libkdb5-10t64Upgrade krb5-kdcUpgrade krb5-admin-serverUpgrade libgssrpc4t64 | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub