CVE-2007-2443
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...
8.3 HighFix available
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
Exploit likelihood
3.48%Down 8.8 points since Feb 4, 2022
What each source reports
NVD Score used
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
CVE-2007-2443- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
CVE-2007-2443- Updated
- 2026-11-02
EUVDEUVD-2007-2438 No score
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
EUVD-2007-2438- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-59m5-fjcv-54hx No score
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
GHSA-59m5-fjcv-54hx- Updated
- 2026-11-02
OSV No score
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
CVE-2007-2443- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2443 No score
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
- Record
DEBIAN-CVE-2007-2443- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:13 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:14 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge5, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge31.3.6-2sarge4 |
1.3.6-2sarge5 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch2, plus listed versions 1.4.4-7etch1 |
1.4.4-7etch2 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2443 is a high vulnerability (CVSS 8.3) in Mit Kerberos 5, published June 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. Fixed in krb5 1.6.dfsg.1-5.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
vupen.com/english/advisories/2007/2732
secunia.com/advisories/25894
ubuntu.com/usn/usn-477-1
Show 62 moreShow less
securityfocus.com/archive/1/472507/30/5970/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277
redhat.com/support/errata/RHSA-2007-0384.html
secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html
exchange.xforce.ibmcloud.com/vulnerabilities/35085
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
security.gentoo.org/glsa/glsa-200707-11.xml
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
securitytracker.com/id?1018293
kb.cert.org/vuls/id/365313
debian.org/security/2007/dsa-1323
trustix.org/errata/2007/0021
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt
us-cert.gov/cas/techalerts/TA07-177A.html
novell.com/linux/security/advisories/2007_38_krb5.html
mandriva.com/security/advisories?name=MDKSA-2007:137
issues.rpath.com/browse/RPL-1499
docs.info.apple.com/article.html?artnum=306172
osvdb.org/36597
nvd.nist.gov/vuln/detail/CVE-2007-2443
github.com/advisories/GHSA-59m5-fjcv-54hx
security-tracker.debian.org/tracker/CVE-2007-2443
access.redhat.com/errata/RHSA-2007:0384
bugzilla.redhat.com/show_bug.cgi?id=241590
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0384.json
cve.org/CVERecord?id=CVE-2007-2442