In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libkadm5Upgrade krb5-serverUpgrade mysql-serverUpgrade krb5-workstationUpgrade mysql-develUpgrade krb5-libsUpgrade mysql-libsUpgrade mysql-commonUpgrade krb5-server-ldapUpgrade mecab-ipadic-EUCJPUpgrade mecab-develUpgrade mysqlUpgrade mecabUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade krb5-develUpgrade krb5-pkinitUpgrade mysql-test | Aug 22, 2024 | Jun 28, 2024 |
| Alpine Linux | — | Upgrade krb5 | Aug 22, 2024 | Jun 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server | Jul 23, 2024 | Jun 28, 2024 |
| Amazon_linux_2023 | — | Upgrade krb5-pkinit-debuginfoUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-debugsourceUpgrade krb5-debuginfoUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server-debuginfoUpgrade krb5-libs-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-devel | Feb 17, 2025 | Jun 27, 2024 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 28, 2024 |
| Debian | — | Upgrade krb5 | Jul 9, 2024 | Jun 28, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5-serverUpgrade krb5-clientUpgrade krb5-libsUpgrade krb5 | Oct 8, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade krb5-clientUpgrade krb5-serverUpgrade krb5-libsUpgrade krb5 | Oct 9, 2024 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade krb5-server-ldapUpgrade krb5-pkinitUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-devel | Jan 21, 2025 | Jun 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5 | Oct 8, 2024 | Jun 28, 2024 |
| Oracle Mysql | — | Upgrade to MySQL version 9.1.0Upgrade to MySQL version 8.4.3Upgrade to MySQL version 8.0.40 | Jan 22, 2025 | Jun 28, 2024 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade mecabUpgrade mecab-ipadicUpgrade mysqlUpgrade krb5-serverUpgrade mysql-commonUpgrade mysql-errmsgUpgrade mysql-testUpgrade mecab-ipadic-EUCJPUpgrade krb5-workstationUpgrade mysql-libsUpgrade krb5-develUpgrade mecab-develUpgrade krb5-server-ldapUpgrade mysql-serverUpgrade mysql-develUpgrade krb5-pkinitUpgrade libkadm5 | Oct 16, 2024 | Jun 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade krb5-devel-debuginfoUpgrade libkadm5-debuginfoUpgrade mysql-commonUpgrade libkadm5Upgrade mecab-debuginfoUpgrade mysql-errmsgUpgrade mysql-libs-debuginfoUpgrade mysql-testUpgrade krb5-pkinit-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-debuginfoUpgrade krb5-libsUpgrade mysql-debugsourceUpgrade mecabUpgrade mysqlUpgrade mecab-ipadicUpgrade krb5-serverUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade krb5-debugsourceUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-libs-debuginfoUpgrade krb5-pkinitUpgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade krb5-debuginfoUpgrade mecab-develUpgrade mysql-libsUpgrade mysql-serverUpgrade krb5-server-debuginfoUpgrade mysql-server-debuginfoUpgrade krb5-workstationUpgrade mecab-debugsource | Jul 24, 2024 | Jun 28, 2024 |
| Rocky_linux | — | Upgrade mysqlUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade mysql-testUpgrade mysql-develUpgrade krb5-develUpgrade mysql-debugsourceUpgrade krb5-debugsourceUpgrade mysql-serverUpgrade krb5-workstation-debuginfoUpgrade mysql-devel-debuginfoUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade mysql-server-debuginfoUpgrade mecab-debugsourceUpgrade mecabUpgrade mecab-develUpgrade libkadm5Upgrade krb5-server-debuginfoUpgrade mysql-debuginfoUpgrade mysql-libsUpgrade mysql-commonUpgrade mecab-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade mysql-errmsgUpgrade mecab-ipadicUpgrade mysql-test-debuginfoUpgrade krb5-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade krb5-server-ldap-debuginfoUpgrade krb5-libs-debuginfoUpgrade krb5-serverUpgrade libkadm5-debuginfoUpgrade krb5-workstationUpgrade mysql-libs-debuginfo | Feb 27, 2025 | Jun 28, 2024 |
| Suse | — | Upgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5Upgrade krb5-clientUpgrade krb5-32bitUpgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-preauth-spakeUpgrade krb5-docUpgrade krb5-serverUpgrade krb5-plugin-kdb-ldapUpgrade krb5-plugin-preauth-pkinit | Jul 9, 2024 | Jun 28, 2024 |
| Ubuntu | — | Upgrade krb5-admin-serverUpgrade libkrb5support0 (Ubuntu Pro)Upgrade libkadm5clnt-mit12Upgrade libkdb5-9Upgrade libkrad0 (Ubuntu Pro)Upgrade libkadm5clnt-mit11 (Ubuntu Pro)Upgrade krb5-pkinitUpgrade krb5-admin-server (Ubuntu Pro)Upgrade libkdb5-7 (Ubuntu Pro)Upgrade libkrb5support0Upgrade libgssrpc4t64Upgrade libkdb5-9 (Ubuntu Pro)Upgrade krb5-pkinit (Ubuntu Pro)Upgrade libkadm5clnt-mit11Upgrade libkadm5srv-mit12Upgrade libgssrpc4Upgrade libkdb5-10t64Upgrade libkadm5clnt-mit9 (Ubuntu Pro)Upgrade libgssrpc4 (Ubuntu Pro)Upgrade libkrb5-3Upgrade libkdb5-10Upgrade krb5-kdc-ldap (Ubuntu Pro)Upgrade libgssapi-krb5-2 (Ubuntu Pro)Upgrade libkadm5srv-mit11Upgrade libkadm5srv-mit11 (Ubuntu Pro)Upgrade krb5-kdcUpgrade krb5-otpUpgrade krb5-user (Ubuntu Pro)Upgrade libgssapi-krb5-2Upgrade libk5crypto3 (Ubuntu Pro)Upgrade libkadm5srv-mit9 (Ubuntu Pro)Upgrade libkrb5-3 (Ubuntu Pro)Upgrade krb5-kdc-ldapUpgrade krb5-kdc (Ubuntu Pro)Upgrade krb5-userUpgrade libkrad0Upgrade libkadm5srv-mit8 (Ubuntu Pro)Upgrade krb5-otp (Ubuntu Pro)Upgrade libk5crypto3Upgrade libkdb5-8 (Ubuntu Pro) | Aug 9, 2024 | Jun 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub