Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinit | Nov 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade libkadm5-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-libsUpgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-debugsourceUpgrade krb5-pkinit-debuginfoUpgrade krb5-pkinitUpgrade krb5-workstation-debuginfoUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfo | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | Upgrade krb5 | May 15, 2025 | Feb 29, 2024 |
| Oracle_linux | — | Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-server | Nov 21, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade krb5-debugsourceUpgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldap-debuginfoUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-workstation-debuginfoUpgrade libkadm5Upgrade krb5-libs-debuginfoUpgrade krb5-pkinitUpgrade krb5-pkinit-debuginfoUpgrade krb5-libsUpgrade krb5-server-debuginfoUpgrade libkadm5-debuginfoNo solution exists | Nov 13, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-32bitUpgrade krb5Upgrade krb5-serverUpgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-preauth-spakeUpgrade krb5-devel-32bitUpgrade krb5-clientUpgrade krb5-devel | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade krb5-kdcUpgrade libgssrpc4t64Upgrade libkdb5-10t64Upgrade libgssrpc4Upgrade libgssapi-krb5-2Upgrade libkdb5-9Upgrade libkdb5-10Upgrade krb5-admin-server | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub