Every CVE Search/ Get API key

CVE-2023-36054

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1...

6.5 MediumFix available

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.81%Up 2.8 points since Aug 8, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
CVE-2023-36054
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-824
Updated
2026-11-02
CVE List No score

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
CVE-2023-36054
Updated
2026-11-02
EUVDEUVD-2023-40036 No score

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
EUVD-2023-40036
Updated
2026-11-03
GitHub AdvisoriesGHSA-39q6-4vrm-fv3g 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1...

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
GHSA-39q6-4vrm-fv3g
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-824
Updated
2026-11-02
OSVALPINE-CVE-2023-36054 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
ALPINE-CVE-2023-36054
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-27874 6.5

CVE-2023-36054 affecting package krb5 for versions less than 1.19.4-2

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
AZL-27874
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 25 moreShow less
OSVBELL-CVE-2023-36054 6.5
Record
BELL-CVE-2023-36054
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-36054 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
DEBIAN-CVE-2023-36054
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-92 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
JLSEC-2026-92
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1526 6.5

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.(CVE-2023-36054)

Record
OESA-2023-1526
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1527 6.5

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.(CVE-2023-36054)

Record
OESA-2023-1527
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1528 6.5

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.(CVE-2023-36054)

Record
OESA-2023-1528
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1555 6.5

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.(CVE-2023-36054)

Record
OESA-2023-1555
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1556 6.5

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.(CVE-2023-36054)

Record
OESA-2023-1556
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:6699 8.8

Red Hat Security Advisory: krb5 security and bug fix update

Record
RHSA-2023:6699
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:6699 8.8

Moderate: krb5 security and bug fix update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)

  • krb5: double-free in KDC TGS processing (CVE-2023-39975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

Record
RLSA-2023:6699
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-36054 6.5

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
UBUNTU-CVE-2023-36054
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:6699 No score

Moderate: krb5 security and bug fix update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: Denial of service through freeing uninitialized pointer (CVE-2023-36054)
  • krb5: double-free in KDC TGS processing (CVE-2023-39975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:6699
Updated
2026-11-02
OSVCLSA-2023-1700160468 No score

Fix CVE(s): CVE-2023-36054

  • SECURITY UPDATE: Remote authenticated user can trigger a kadmind crash
    • debian/patches/CVE-2023-36054.patch: ensure array count consistency in kadm5 RPC
    • CVE-2023-36054
Record
CLSA-2023-1700160468
Updated
2026-11-02
OSVCLSA-2023-1700161076 No score

Fix CVE(s): CVE-2023-36054

  • SECURITY UPDATE: Remote authenticated user can trigger a kadmind crash
    • debian/patches/CVE-2023-36054.patch: ensure array count consistency in kadm5 RPC
    • CVE-2023-36054
Record
CLSA-2023-1700161076
Updated
2026-11-02
OSVCLSA-2024-1720178212 No score

krb5: Fix of CVE-2023-36054

  • CVE-2023-36054: fix uninitialized pointer in kadm_rpc_xdr.c to prevent kadmind crash
Record
CLSA-2024-1720178212
Updated
2026-11-02
OSVCLSA-2026-1779875639 No score

krb5: Fix of 5 CVEs

  • CVE-2025-24528: prevent overflow when calculating ulog block size
  • CVE-2025-3576: don't issue session keys with deprecated enctypes (RC4-HMAC-MD5 spoofing)
  • CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message
  • CVE-2026-40356: fix integer underflow in NegoEx parse_message header_len
  • CVE-2023-36054: ensure array count consistency in kadm5 RPC to prevent freeing uninitialized pointers in _xdr_kadm5_principal_ent_rec
Record
CLSA-2026-1779875639
Updated
2026-11-02
OSV No score

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Record
CVE-2023-36054
Updated
2026-11-02
OSVopenSUSE-SU-2024:13050-1 No score

krb5-1.21.1-1.1 on GA media

These are all security issues fixed in the krb5-1.21.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13050-1
Updated
2026-11-02
OSVSUSE-SU-2023:3325-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
Record
SUSE-SU-2023:3325-1
Updated
2026-11-02
OSVSUSE-SU-2023:3363-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
Record
SUSE-SU-2023:3363-1
Updated
2026-11-02
OSVSUSE-SU-2023:3365-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
Record
SUSE-SU-2023:3365-1
Updated
2026-11-02
OSVSUSE-SU-2023:3398-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
Record
SUSE-SU-2023:3398-1
Updated
2026-11-02
OSVSUSE-SU-2023:3434-1 No score

Security update for krb5

This update for krb5 fixes the following issues:

  • CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
Record
SUSE-SU-2023:3434-1
Updated
2026-11-02
OSVUSN-6467-1 No score

krb5 vulnerability

Robert Morris discovered that Kerberos did not properly handle memory access when processing RPC data through kadmind, which could lead to the freeing of uninitialized memory. An authenticated remote attacker could possibly use this issue to cause kadmind to crash, resulting in a denial of service.

Record
USN-6467-1
Updated
2026-11-02
OSVUSN-6467-2 No score

krb5 vulnerability

USN-6467-1 fixed a vulnerability in Kerberos. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04.

Original advisory details:

Robert Morris discovered that Kerberos did not properly handle memory access when processing RPC data through kadmind, which could lead to the freeing of uninitialized memory. An authenticated remote attacker could possibly use this issue to cause kadmind to crash, resulting in a denial of service.

Record
USN-6467-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5
Alpine:v3.17
 before 1.20.2-r0
1.20.2-r0
krb5
Alpine:v3.18
 before 1.20.2-r0
1.20.2-r0
krb5-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5-pkinit
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5-server-ldap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5-workstation
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
libkadm5
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-1.el9
1.21.1-1.el9
krb5
Azure Linux:2
 before 1.19.4-2
1.19.4-2
Show 130 moreShow less
Affected packages
PackageAffectedFixed
krb5
Alpaquita:23
 1.20.1-r0 up to 1.20.2-r0
1.20.2-r0
krb5-admin-server
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-doc
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-gss-samples
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-k5tls
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-kdc
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-kdc-ldap
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-kpropd
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-locales
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-multidev
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-otp
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-pkinit
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-user
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libgssapi-krb5-2
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libgssrpc4
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libk5crypto3
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkadm5clnt-mit11
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkadm5srv-mit11
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkdb5-9
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkrad-dev
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkrad0
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkrb5-3
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkrb5-dev
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
libkrb5support0
TuxCare:Ubuntu:18.04
 before 1.16-2ubuntu0.4+tuxcare.els1
1.16-2ubuntu0.4+tuxcare.els1
krb5-admin-server
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-doc
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-gss-samples
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-k5tls
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-kdc
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-kdc-ldap
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-locales
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-multidev
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-otp
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-pkinit
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-user
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libgssapi-krb5-2
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libgssrpc4
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libk5crypto3
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkadm5clnt-mit9
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkadm5srv-mit9
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkdb5-8
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkrad-dev
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkrad0
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkrb5-3
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkrb5-dev
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
libkrb5support0
TuxCare:Ubuntu:16.04
 before 1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
1.13.2+dfsg-5ubuntu2.2+tuxcare.els3
krb5-devel
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-libs
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-pkinit
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-server
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-server-ldap
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-workstation
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
libkadm5
TuxCare:AlmaLinux:9.2
 before 1.20.1-9.el9_2.tuxcare.els2
1.20.1-9.el9_2.tuxcare.els2
krb5-devel
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-libs
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-pkinit
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-server
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-server-ldap
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-workstation
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
libkadm5
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5
Debian:12
 before 1.20.1-2+deb12u1, plus listed versions
1.20.1-2
1.20.1-2+deb12u1
krb5
Debian:13
 before 1.20.1-3
1.20.1-3
krb5
Debian:14
 before 1.20.1-3
1.20.1-3
krb5
Debian:10
 before 1.17-3+deb10u6, plus listed versions
1.17-31.17-3+deb10u11.17-3+deb10u21.17-3+deb10u31.17-3+deb10u41.17-3+deb10u5
1.17-3+deb10u6
Kerberos_krb5_jll
Julia
 before 1.21.3+0
1.21.3+0
krb5
openEuler:20.03-LTS-SP1
 before 1.18.2-7.oe1
1.18.2-7.oe1
krb5
openEuler:20.03-LTS-SP3
 before 1.18.2-8.oe1
1.18.2-8.oe1
krb5
openEuler:22.03-LTS
 before 1.19.2-8.oe2203
1.19.2-8.oe2203
krb5
openEuler:22.03-LTS-SP1
 before 1.19.2-9.oe2203sp1
1.19.2-9.oe2203sp1
krb5
openEuler:22.03-LTS-SP2
 before 1.19.2-9.oe2203sp2
1.19.2-9.oe2203sp2
krb5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-workstation-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
libkadm5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-pkinit
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server-ldap
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-workstation
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5-workstation-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
libkadm5
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
libkadm5-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-1.el9
0:1.21.1-1.el9
krb5
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.20.1-150500.3.3.1
1.20.1-150500.3.3.1
krb5
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 1.20.1-150500.3.3.1
1.20.1-150500.3.3.1
krb5
openSUSE:Leap 15.5
 before 1.20.1-150500.3.3.1
1.20.1-150500.3.3.1
krb5
SUSE:Linux Enterprise Micro 5.3
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
SUSE:Linux Enterprise Micro 5.4
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
openSUSE:Leap Micro 5.3
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
openSUSE:Leap Micro 5.4
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
openSUSE:Leap 15.4
 before 1.19.2-150400.3.6.1
1.19.2-150400.3.6.1
krb5
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Manager Proxy 4.2
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Manager Server 4.2
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise Micro 5.1
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise Micro 5.2
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Enterprise Storage 7.1
 before 1.19.2-150300.13.1
1.19.2-150300.13.1
krb5
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.12.5-40.52.1
1.12.5-40.52.1
krb5
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.12.5-40.52.1
1.12.5-40.52.1
krb5
SUSE:Linux Enterprise Server 12 SP5
 before 1.12.5-40.52.1
1.12.5-40.52.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.12.5-40.52.1
1.12.5-40.52.1
krb5
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.16.3-150100.3.30.1
1.16.3-150100.3.30.1
krb5
Ubuntu:Pro:14.04:LTS
 before 1.12+dfsg-2ubuntu5.4+esm4, plus listed versions
1.10.1+dfsg-6.1ubuntu11.11.3+dfsg-3ubuntu21.12+dfsg-2ubuntu11.12+dfsg-2ubuntu21.12+dfsg-2ubuntu3
Show 10 moreShow less
1.12+dfsg-2ubuntu41.12+dfsg-2ubuntu4.21.12+dfsg-2ubuntu51.12+dfsg-2ubuntu5.11.12+dfsg-2ubuntu5.21.12+dfsg-2ubuntu5.31.12+dfsg-2ubuntu5.41.12+dfsg-2ubuntu5.4+esm11.12+dfsg-2ubuntu5.4+esm21.12+dfsg-2ubuntu5.4+esm3
1.12+dfsg-2ubuntu5.4+esm4
krb5
Ubuntu:Pro:16.04:LTS
 before 1.13.2+dfsg-5ubuntu2.2+esm4, plus listed versions
1.13.2+dfsg-21.13.2+dfsg-31.13.2+dfsg-41.13.2+dfsg-51.13.2+dfsg-5ubuntu1
Show 5 moreShow less
1.13.2+dfsg-5ubuntu21.13.2+dfsg-5ubuntu2.11.13.2+dfsg-5ubuntu2.1+esm11.13.2+dfsg-5ubuntu2.21.13.2+dfsg-5ubuntu2.2+esm3
1.13.2+dfsg-5ubuntu2.2+esm4
krb5
Ubuntu:Pro:18.04:LTS
 before 1.16-2ubuntu0.4+esm1, plus listed versions
1.15.1-21.16-21.16-2build11.16-2ubuntu0.11.16-2ubuntu0.1+esm11.16-2ubuntu0.21.16-2ubuntu0.31.16-2ubuntu0.4
1.16-2ubuntu0.4+esm1
krb5
Ubuntu:20.04:LTS
 before 1.17-6ubuntu4.4, plus listed versions
1.17-61.17-6ubuntu31.17-6ubuntu41.17-6ubuntu4.11.17-6ubuntu4.21.17-6ubuntu4.3
1.17-6ubuntu4.4
krb5
Ubuntu:22.04:LTS
 before 1.19.2-2ubuntu0.3, plus listed versions
1.18.3-61.18.3-71.19.2-0ubuntu11.19.2-11.19.2-21.19.2-2ubuntu0.11.19.2-2ubuntu0.2
1.19.2-2ubuntu0.3
krb5
openSUSE:Tumbleweed
 before 1.21.1-1.1
1.21.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-36054 is a medium vulnerability (CVSS 6.5) in Mit Kerberos 5, published August 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in krb5 1.20.2-r0.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open