In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-libs | Mar 18, 2025 | Mar 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-server-ldap | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade krb5-libs-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-serverUpgrade krb5-pkinit-debuginfoUpgrade krb5-workstationUpgrade libkadm5-debuginfoUpgrade krb5-debuginfoUpgrade krb5-workstation-debuginfoUpgrade libkadm5Upgrade krb5-pkinitUpgrade krb5-server-debuginfoUpgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-debugsource | Sep 9, 2025 | Jan 28, 2024 |
| Debian | — | Upgrade krb5 | Feb 25, 2025 | Feb 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5Upgrade krb5-clientUpgrade krb5-libsUpgrade krb5-server | May 13, 2025 | Apr 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade krb5-libsUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5 | Apr 11, 2025 | Apr 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-clientUpgrade krb5 | May 7, 2025 | Apr 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade krb5-clientUpgrade krb5Upgrade krb5-libsUpgrade krb5-server | Jun 11, 2025 | Apr 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jul 9, 2025 |
| Oracle_linux | — | Upgrade krb5-libsUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-server-ldapUpgrade krb5-workstation | Mar 10, 2025 | Jan 28, 2024 |
| Redhat_linux | — | Upgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-develUpgrade krb5-server-debuginfoUpgrade krb5-pkinitUpgrade krb5-workstation-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-libsUpgrade krb5-pkinit-debuginfoNo solution existsUpgrade krb5-serverUpgrade krb5-debugsourceUpgrade krb5-server-ldapUpgrade krb5-libs-debuginfoUpgrade krb5-devel-debuginfoUpgrade libkadm5 | Mar 17, 2025 | Jan 28, 2024 |
| Rocky_linux | — | Upgrade libkadm5Upgrade krb5-libs-debuginfoUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-pkinitUpgrade krb5-server-debuginfoUpgrade krb5-serverUpgrade libkadm5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-pkinit-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-debugsourceUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-devel-debuginfoUpgrade krb5-libs | May 8, 2025 | May 7, 2025 |
| Suse | — | Upgrade krb5-plugin-preauth-otpUpgrade krb5-develUpgrade crypto-policies-scriptsUpgrade krb5-devel-32bitUpgrade krb5-plugin-kdb-ldapUpgrade krb5-32bitUpgrade krb5-clientUpgrade krb5-plugin-preauth-spakeUpgrade krb5-plugin-preauth-pkinitUpgrade krb5Upgrade krb5-docUpgrade krb5-serverUpgrade crypto-policies | Feb 10, 2025 | Jan 30, 2025 |
| Ubuntu | — | Upgrade libgssapi-krb5-2Upgrade libgssrpc4Upgrade libgssrpc4t64Upgrade libkdb5-9Upgrade krb5-kdcUpgrade libkdb5-10t64Upgrade libkdb5-10Upgrade krb5-admin-server | Mar 4, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 16, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub