CVE-2007-2442
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...
10.0 HighFix available
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
Exploit likelihood
11.4%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
CVE-2007-2442- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-824
- Updated
- 2026-11-02
CVE List No score
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
CVE-2007-2442- Updated
- 2026-11-02
EUVDEUVD-2007-2437 No score
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
EUVD-2007-2437- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hfh-4j58-7r89 No score
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
GHSA-6hfh-4j58-7r89- Updated
- 2026-11-02
OSV No score
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
CVE-2007-2442- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2442 No score
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
- Record
DEBIAN-CVE-2007-2442- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:13 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:14 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge5, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge31.3.6-2sarge4 |
1.3.6-2sarge5 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch2, plus listed versions 1.4.4-7etch1 |
1.4.4-7etch2 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2442 is a high vulnerability (CVSS 10.0) in Mit Kerberos 5, published June 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. Fixed in krb5 1.6.dfsg.1-5.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
exchange.xforce.ibmcloud.com/vulnerabilities/35082
vupen.com/english/advisories/2007/2732
secunia.com/advisories/25894
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631
Show 85 moreShow less
ubuntu.com/usn/usn-477-1
kb.cert.org/vuls/id/356961
securityfocus.com/archive/1/472507/30/5970/threaded
osvdb.org/36596
redhat.com/support/errata/RHSA-2007-0384.html
secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
security.gentoo.org/glsa/glsa-200707-11.xml
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
securitytracker.com/id?1018293
debian.org/security/2007/dsa-1323
trustix.org/errata/2007/0021
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt
us-cert.gov/cas/techalerts/TA07-177A.html
novell.com/linux/security/advisories/2007_38_krb5.html
mandriva.com/security/advisories?name=MDKSA-2007:137
issues.rpath.com/browse/RPL-1499
docs.info.apple.com/article.html?artnum=306172
sunsolve.sun.com/search/document.do?assetkey=1-26-102914-1
nvd.nist.gov/vuln/detail/CVE-2007-2442
github.com/advisories/GHSA-6hfh-4j58-7r89
security-tracker.debian.org/tracker/CVE-2007-2442
access.redhat.com/errata/RHSA-2007:0384
bugzilla.redhat.com/show_bug.cgi?id=241590
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0384.json
cve.org/CVERecord?id=CVE-2007-2442
suse.com/security/cve/CVE-2006-6143