Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinit | Nov 19, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-pkinitUpgrade krb5-workstation-debuginfoUpgrade krb5-debuginfoUpgrade krb5-develUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-server-debuginfoUpgrade krb5-workstationUpgrade libkadm5-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade krb5-libs | Feb 17, 2025 | Feb 28, 2024 |
| Debian | — | Upgrade krb5 | May 15, 2025 | Feb 29, 2024 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-develUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server-ldap | Nov 21, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade krb5-libsUpgrade krb5-server-debuginfoNo solution existsUpgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-workstation-debuginfoUpgrade krb5-debuginfoUpgrade krb5-debugsourceUpgrade krb5-libs-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade libkadm5Upgrade krb5-pkinit | Nov 13, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-serverUpgrade krb5-32bitUpgrade krb5Upgrade krb5-devel-32bitUpgrade krb5-plugin-preauth-spakeUpgrade krb5-develUpgrade krb5-clientUpgrade krb5-plugin-preauth-otp | Mar 27, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade libkdb5-10Upgrade krb5-admin-serverUpgrade libkdb5-9Upgrade libgssrpc4t64Upgrade libgssrpc4Upgrade libkdb5-10t64Upgrade libgssapi-krb5-2Upgrade krb5-kdc | Mar 4, 2025 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub