Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade krb5 | Jul 30, 2024 | Mar 20, 2011 |
| Freebsd | — | Upgrade krb5 | Dec 10, 2025 | Apr 14, 2011 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | Mar 19, 2011 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade system/security/kerberos-5 to version 0.5.11-0.175.1.11.0.3.2 on Solaris 11.1 | May 29, 2017 | Mar 19, 2011 |
| Oracle_linux | — | Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinit-opensslUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-server | Oct 16, 2024 | Mar 20, 2011 |
| Suse | — | Upgrade krb5-serverUpgrade krb5-apps-clientsUpgrade krb5-plugin-kdb-ldapUpgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5-32bitUpgrade krb5-plugin-preauth-pkinitUpgrade krb5-clientUpgrade krb5-apps-serversUpgrade krb5 | Feb 17, 2015 | Mar 19, 2011 |
| Ubuntu | — | Upgrade krb5-kdc | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub