Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libkadm5Upgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-libs | May 31, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libkadm5Upgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-devel | Apr 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade libkadm5Upgrade krb5-debugsourceUpgrade krb5-workstationUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-server-debuginfoUpgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-debuginfoUpgrade krb5-pkinit | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Feb 29, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Oracle_linux | — | Upgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-server | May 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade krb5-debuginfoUpgrade krb5-serverUpgrade krb5-pkinit-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-server-ldapUpgrade krb5-libs-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinitUpgrade krb5-server-ldap-debuginfoUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-debugsourceUpgrade krb5-develUpgrade krb5-libsUpgrade libkadm5-debuginfoNo solution existsUpgrade krb5-devel-debuginfo | May 23, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade krb5-serverUpgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-debuginfoUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-devel-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-debugsourceUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-pkinit-debuginfo | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5-develUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-preauth-spakeUpgrade krb5-32bitUpgrade krb5-devel-32bitUpgrade krb5-clientUpgrade krb5-plugin-kdb-ldapUpgrade krb5Upgrade krb5-serverUpgrade krb5-plugin-preauth-otpUpgrade krb5-doc | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade krb5-kdcUpgrade libgssrpc4t64Upgrade libkdb5-10t64Upgrade krb5-admin-serverUpgrade libkdb5-9Upgrade libkdb5-10Upgrade libgssapi-krb5-2Upgrade libgssrpc4 | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub