In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-commonUpgrade mysql-libsUpgrade krb5-serverUpgrade krb5-libsUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysql-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-server-ldapUpgrade mysql-develUpgrade mecabUpgrade mysqlUpgrade krb5-pkinitUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade mysql-testUpgrade krb5-devel | Aug 22, 2024 | Jun 28, 2024 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jun 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-libs | Jul 23, 2024 | Jun 28, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade libkadm5-debuginfoUpgrade libkadm5Upgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libsUpgrade krb5-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-pkinit | Feb 17, 2025 | Jun 27, 2024 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 28, 2024 |
| Debian | — | Upgrade krb5 | Jul 9, 2024 | Jun 28, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5-clientUpgrade krb5-libsUpgrade krb5Upgrade krb5-server | Oct 8, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade krb5-clientUpgrade krb5Upgrade krb5-libsUpgrade krb5-server | Oct 9, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-devel | Jan 21, 2025 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5 | Oct 8, 2024 | Jun 28, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.3Upgrade to MySQL version 9.1.0Upgrade to MySQL version 8.0.40 | Jan 22, 2025 | Jun 28, 2024 |
| Oracle_linux | — | Upgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade krb5-workstationUpgrade krb5-develUpgrade libkadm5Upgrade mysql-serverUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade mysql-develUpgrade mecab-develUpgrade mecabUpgrade mecab-ipadicUpgrade mysqlUpgrade krb5-libsUpgrade krb5-serverUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mysql-test | Oct 16, 2024 | Jun 27, 2024 |
| Redhat_linux | — | Upgrade mysql-commonUpgrade krb5-pkinit-debuginfoUpgrade mysql-debugsourceUpgrade mecab-debuginfoNo solution existsUpgrade krb5-devel-debuginfoUpgrade mysql-testUpgrade libkadm5-debuginfoUpgrade krb5-libsUpgrade mysql-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-libs-debuginfoUpgrade libkadm5Upgrade mysql-errmsgUpgrade mecabUpgrade mysqlUpgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-server-debuginfoUpgrade mysql-develUpgrade krb5-server-ldapUpgrade mecab-ipadic-EUCJPUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-debugsourceUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade mysql-server-debuginfoUpgrade krb5-workstation-debuginfoUpgrade mecab-develUpgrade mysql-libsUpgrade mysql-devel-debuginfoUpgrade mysql-serverUpgrade krb5-pkinit | Jul 24, 2024 | Jun 28, 2024 |
| Rocky_linux | — | Upgrade krb5-develUpgrade krb5-server-ldapUpgrade mecabUpgrade mysql-debugsourceUpgrade mysql-testUpgrade mysql-devel-debuginfoUpgrade mysql-serverUpgrade krb5-debugsourceUpgrade mecab-debugsourceUpgrade mysql-develUpgrade krb5-workstation-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade mysql-server-debuginfoUpgrade mecab-develUpgrade mysqlUpgrade krb5-libsUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-test-debuginfoUpgrade mysql-libsUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade krb5-server-debuginfoUpgrade mysql-errmsgUpgrade mysql-debuginfoUpgrade mecab-ipadicUpgrade libkadm5Upgrade krb5-serverUpgrade mysql-common | Feb 27, 2025 | Jun 28, 2024 |
| Suse | — | Upgrade krb5-plugin-kdb-ldapUpgrade krb5-serverUpgrade krb5-plugin-preauth-pkinitUpgrade krb5Upgrade krb5-32bitUpgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-preauth-spakeUpgrade krb5-docUpgrade krb5-devel-32bitUpgrade krb5-clientUpgrade krb5-devel | Jul 9, 2024 | Jun 28, 2024 |
| Ubuntu | — | Upgrade libgssrpc4t64Upgrade krb5-admin-serverUpgrade libkadm5clnt-mit11 (Ubuntu Pro)Upgrade libkadm5clnt-mit11Upgrade libgssrpc4 (Ubuntu Pro)Upgrade libkrb5support0 (Ubuntu Pro)Upgrade libkadm5srv-mit12Upgrade libkadm5clnt-mit9 (Ubuntu Pro)Upgrade krb5-admin-server (Ubuntu Pro)Upgrade libkdb5-9Upgrade libkrad0 (Ubuntu Pro)Upgrade libkdb5-9 (Ubuntu Pro)Upgrade libkdb5-10t64Upgrade libkdb5-7 (Ubuntu Pro)Upgrade libkadm5clnt-mit12Upgrade krb5-pkinitUpgrade libkrb5-3Upgrade libgssrpc4Upgrade krb5-pkinit (Ubuntu Pro)Upgrade libkdb5-10Upgrade libkrb5support0Upgrade libkadm5srv-mit8 (Ubuntu Pro)Upgrade libkrad0Upgrade libkadm5srv-mit11Upgrade libkadm5srv-mit9 (Ubuntu Pro)Upgrade krb5-kdc-ldapUpgrade libgssapi-krb5-2Upgrade krb5-userUpgrade libgssapi-krb5-2 (Ubuntu Pro)Upgrade libkrb5-3 (Ubuntu Pro)Upgrade libkadm5srv-mit11 (Ubuntu Pro)Upgrade krb5-kdcUpgrade krb5-user (Ubuntu Pro)Upgrade libkdb5-8 (Ubuntu Pro)Upgrade krb5-otp (Ubuntu Pro)Upgrade libk5crypto3Upgrade libk5crypto3 (Ubuntu Pro)Upgrade krb5-otpUpgrade krb5-kdc (Ubuntu Pro)Upgrade krb5-kdc-ldap (Ubuntu Pro) | Aug 9, 2024 | Jun 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub