Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-develUpgrade krb5-pkinit | May 31, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-server-ldapUpgrade krb5-debuginfoUpgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server | Apr 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade libkadm5Upgrade krb5-server-debuginfoUpgrade krb5-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-debugsource | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Feb 29, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Oracle_linux | — | Upgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-libs | May 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-devel-debuginfoNo solution existsUpgrade libkadm5-debuginfoUpgrade krb5-debugsourceUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-pkinit-debuginfoUpgrade krb5-debuginfoUpgrade krb5-serverUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-devel | May 23, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade krb5-libsUpgrade krb5-workstation-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-develUpgrade krb5-debuginfoUpgrade krb5-pkinitUpgrade krb5-server-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade krb5-pkinit-debuginfoUpgrade libkadm5Upgrade krb5-debugsourceUpgrade krb5-server-ldap | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5-32bitUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-docUpgrade krb5-clientUpgrade krb5Upgrade krb5-plugin-preauth-spakeUpgrade krb5-devel-32bitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-develUpgrade krb5-serverUpgrade krb5-plugin-preauth-otp | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade libkdb5-10Upgrade krb5-admin-serverUpgrade libgssrpc4Upgrade libgssrpc4t64Upgrade krb5-kdcUpgrade libkdb5-9Upgrade libgssapi-krb5-2Upgrade libkdb5-10t64 | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub