ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-krb5-develalma-upgrade-krb5-libsalma-upgrade-krb5-pkinitalma-upgrade-krb5-serveralma-upgrade-krb5-server-ldapalma-upgrade-krb5-workstationalma-upgrade-libkadm5 | May 4, 2022 | Jul 22, 2021 | |
| Alpine Linux | alpine-linux-upgrade-krb5 | Aug 22, 2024 | Jul 22, 2021 | |
| Centos_linux | — | centos-upgrade-krb5-debuginfocentos-upgrade-krb5-debugsourcecentos-upgrade-krb5-develcentos-upgrade-krb5-devel-debuginfocentos-upgrade-krb5-libscentos-upgrade-krb5-libs-debuginfocentos-upgrade-krb5-pkinitcentos-upgrade-krb5-pkinit-debuginfocentos-upgrade-krb5-servercentos-upgrade-krb5-server-debuginfocentos-upgrade-krb5-server-ldapcentos-upgrade-krb5-server-ldap-debuginfocentos-upgrade-krb5-workstationcentos-upgrade-krb5-workstation-debuginfocentos-upgrade-libkadm5centos-upgrade-libkadm5-debuginfo | Sep 22, 2021 | Jul 22, 2021 |
| Debian | debian-upgrade-krb5 | Jul 26, 2021 | Jul 22, 2021 | |
| Freebsd | freebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-mysql80-clientfreebsd-upgrade-package-mysql-connector-javafreebsd-upgrade-package-mysql80-serverfreebsd-upgrade-package-mariadb103-serverfreebsd-upgrade-package-mariadb104-serverfreebsd-upgrade-package-mariadb105-server | Nov 4, 2022 | Oct 17, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-crypt-mit-krb5 | May 6, 2024 | Jul 22, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-krb5-develhuawei-euleros-2_0_sp8-upgrade-krb5-libshuawei-euleros-2_0_sp8-upgrade-krb5-pkinithuawei-euleros-2_0_sp8-upgrade-krb5-serverhuawei-euleros-2_0_sp8-upgrade-krb5-server-ldaphuawei-euleros-2_0_sp8-upgrade-krb5-workstationhuawei-euleros-2_0_sp8-upgrade-libkadm5 | Sep 24, 2021 | Jul 22, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-krb5huawei-euleros-2_0_sp9-upgrade-krb5-clienthuawei-euleros-2_0_sp9-upgrade-krb5-libshuawei-euleros-2_0_sp9-upgrade-krb5-server | Nov 12, 2021 | Jul 22, 2021 | |
| Oracle Mysql | mysql-upgrade-8_0_27 | Jun 15, 2026 | Jul 22, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-security-kerberos-5-1-18-4-0-11-4-38-0-1-101-1oracle-solaris-11-4-upgrade-security-kerberos-5-kdc-1-18-4-0-11-4-38-0-1-101-1 | Nov 17, 2021 | Jul 22, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-krb5-develoracle-linux-upgrade-krb5-libsoracle-linux-upgrade-krb5-pkinitoracle-linux-upgrade-krb5-serveroracle-linux-upgrade-krb5-server-ldaporacle-linux-upgrade-krb5-workstationoracle-linux-upgrade-libkadm5 | Sep 23, 2021 | Jul 12, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-krb5-debuginforedhat-upgrade-krb5-debugsourceredhat-upgrade-krb5-develredhat-upgrade-krb5-devel-debuginforedhat-upgrade-krb5-libsredhat-upgrade-krb5-libs-debuginforedhat-upgrade-krb5-pkinitredhat-upgrade-krb5-pkinit-debuginforedhat-upgrade-krb5-serverredhat-upgrade-krb5-server-debuginforedhat-upgrade-krb5-server-ldapredhat-upgrade-krb5-server-ldap-debuginforedhat-upgrade-krb5-workstationredhat-upgrade-krb5-workstation-debuginforedhat-upgrade-libkadm5redhat-upgrade-libkadm5-debuginfo | Sep 22, 2021 | Jul 22, 2021 | |
| Rocky_linux | rocky-upgrade-krb5-debuginforocky-upgrade-krb5-debugsourcerocky-upgrade-krb5-develrocky-upgrade-krb5-devel-debuginforocky-upgrade-krb5-libsrocky-upgrade-krb5-libs-debuginforocky-upgrade-krb5-pkinitrocky-upgrade-krb5-pkinit-debuginforocky-upgrade-krb5-serverrocky-upgrade-krb5-server-debuginforocky-upgrade-krb5-server-ldaprocky-upgrade-krb5-server-ldap-debuginforocky-upgrade-krb5-workstationrocky-upgrade-krb5-workstation-debuginforocky-upgrade-libkadm5rocky-upgrade-libkadm5-debuginfo | Mar 12, 2024 | Jul 22, 2021 | |
| Suse | — | suse-upgrade-apache2-mod_apparmorsuse-upgrade-apparmor-abstractionssuse-upgrade-apparmor-docssuse-upgrade-apparmor-parsersuse-upgrade-apparmor-parser-langsuse-upgrade-apparmor-profilessuse-upgrade-apparmor-utilssuse-upgrade-apparmor-utils-langsuse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-dracut-saltbootsuse-upgrade-golang-github-boynux-squid_exportersuse-upgrade-golang-github-prometheus-node_exportersuse-upgrade-golang-github-prometheus-promususe-upgrade-grafanasuse-upgrade-krb5suse-upgrade-krb5-32bitsuse-upgrade-krb5-clientsuse-upgrade-krb5-develsuse-upgrade-krb5-devel-32bitsuse-upgrade-krb5-minisuse-upgrade-krb5-mini-develsuse-upgrade-krb5-plugin-kdb-ldapsuse-upgrade-krb5-plugin-preauth-otpsuse-upgrade-krb5-plugin-preauth-pkinitsuse-upgrade-krb5-plugin-preauth-spakesuse-upgrade-krb5-serversuse-upgrade-ldb-toolssuse-upgrade-libapparmor-develsuse-upgrade-libapparmor1suse-upgrade-libapparmor1-32bitsuse-upgrade-libipa_hbac-develsuse-upgrade-libipa_hbac0suse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libnfsidmap-ssssuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-policy0-python3-64bitsuse-upgrade-libsss_certmap-develsuse-upgrade-libsss_certmap0suse-upgrade-libsss_idmap-develsuse-upgrade-libsss_idmap0suse-upgrade-libsss_nss_idmap-develsuse-upgrade-libsss_nss_idmap0suse-upgrade-libsss_simpleifp-develsuse-upgrade-libsss_simpleifp0suse-upgrade-libtalloc-develsuse-upgrade-libtalloc2suse-upgrade-libtalloc2-32bitsuse-upgrade-libtdb-develsuse-upgrade-libtdb1suse-upgrade-libtdb1-32bitsuse-upgrade-libtevent-develsuse-upgrade-libtevent0suse-upgrade-libtevent0-32bitsuse-upgrade-pam_apparmorsuse-upgrade-pam_apparmor-32bitsuse-upgrade-perl-apparmorsuse-upgrade-prometheus-blackbox_exportersuse-upgrade-prometheus-postgres_exportersuse-upgrade-python3-apparmorsuse-upgrade-python3-ipa_hbacsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-python3-rhnlibsuse-upgrade-python3-sss-murmursuse-upgrade-python3-sss_nss_idmapsuse-upgrade-python3-sssd-configsuse-upgrade-python3-tallocsuse-upgrade-python3-talloc-32bitsuse-upgrade-python3-talloc-develsuse-upgrade-python3-tdbsuse-upgrade-python3-tdb-32bitsuse-upgrade-python3-teventsuse-upgrade-python3-tevent-32bitsuse-upgrade-ruby-apparmorsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-ad-dc-libs-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-64bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-develsuse-upgrade-samba-devel-32bitsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-64bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-libs-python3-64bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bitsuse-upgrade-spacecmdsuse-upgrade-sssdsuse-upgrade-sssd-adsuse-upgrade-sssd-commonsuse-upgrade-sssd-dbussuse-upgrade-sssd-ipasuse-upgrade-sssd-krb5suse-upgrade-sssd-krb5-commonsuse-upgrade-sssd-ldapsuse-upgrade-sssd-proxysuse-upgrade-sssd-toolssuse-upgrade-sssd-wbclientsuse-upgrade-sssd-wbclient-develsuse-upgrade-sssd-winbind-idmapsuse-upgrade-talloc-mansuse-upgrade-tdb-toolssuse-upgrade-tevent-mansuse-upgrade-wire | Aug 21, 2021 | Jul 22, 2021 |
| Ubuntu | ubuntu-upgrade-krb5-k5tlsubuntu-upgrade-krb5-kdcubuntu-upgrade-krb5-kdc-ldapubuntu-upgrade-krb5-pkinit | Mar 22, 2023 | Jul 22, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub