Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-server-ldap | May 31, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-libs | Apr 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-libsUpgrade krb5-server-ldap-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-debugsourceUpgrade krb5-libs-debuginfoUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-server-debuginfoUpgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-workstation-debuginfo | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Feb 29, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Oracle_linux | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinit | May 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade libkadm5-debuginfoUpgrade krb5-develUpgrade krb5-devel-debuginfoUpgrade krb5-libsUpgrade krb5-debugsourceNo solution existsUpgrade krb5-pkinitUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-server | May 23, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade krb5-server-debuginfoUpgrade krb5-debuginfoUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-devel-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade libkadm5Upgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldapUpgrade krb5-server-ldap-debuginfoUpgrade krb5-debugsource | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5Upgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-otpUpgrade krb5-serverUpgrade krb5-docUpgrade krb5-32bitUpgrade krb5-plugin-preauth-spakeUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-develUpgrade krb5-clientUpgrade krb5-devel-32bit | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade libkdb5-9Upgrade libgssapi-krb5-2Upgrade libkdb5-10Upgrade libgssrpc4Upgrade libgssrpc4t64Upgrade krb5-admin-serverUpgrade krb5-kdcUpgrade libkdb5-10t64 | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub