Every CVE Search/ Get API key

CVE-2026-40356

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...

5.9 MediumFix available

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.60%Up 0.5 points since Apr 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-191
Updated
2026-11-02
EUVDEUVD-2026-25993 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
EUVD-2026-25993
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-f7p3-6rhj-p7jv 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
GHSA-f7p3-6rhj-p7jv
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-191
Updated
2026-11-02
NVD 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-191
Updated
2026-11-02
OSVBELL-CVE-2026-40356 7.5
Record
BELL-CVE-2026-40356
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-191
Updated
2026-11-02
Show 36 moreShow less
OSVDEBIAN-CVE-2026-40356 7.5

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
DEBIAN-CVE-2026-40356
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-1259 7.5

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
JLSEC-2026-1259
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2257 5.9

krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

Security Fix(es):

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.(CVE-2026-40355)

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.(CVE-2026-40356)

Record
OESA-2026-2257
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:12220 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:12220
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:16799 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:16799
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:19145 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:19145
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:19357 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:19357
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24683 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:24683
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24685 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:24685
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24686 5.9

Red Hat Security Advisory: krb5 security update

Record
RHSA-2026:24686
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:16799 5.9

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)

  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:16799
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:19145 5.9

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)

  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19145
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:19357 5.9

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)

  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19357
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-40356 5.9

CVE-2026-40356 in rootio-krb5 - Patched by Root

Root has patched CVE-2026-40356 in the rootio-krb5 package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-40356 5.9

CVE-2026-40356 in rootio-krb5 - Patched by Root

Root has patched CVE-2026-40356 in the rootio-krb5 package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-40356 5.9

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
UBUNTU-CVE-2026-40356
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:16799 No score

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)
  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:16799
Updated
2026-11-02
OSVALSA-2026:19145 No score

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)
  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19145
Updated
2026-11-02
OSVALSA-2026:19357 No score

Important: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356)
  • krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism (CVE-2026-40355)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19357
Updated
2026-11-02
OSVAZL-85238 No score

CVE-2026-40356 affecting package krb5 for versions less than 1.21.3-4

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
AZL-85238
Updated
2026-11-05
OSVCLSA-2026-1779875639 No score

krb5: Fix of 5 CVEs

  • CVE-2025-24528: prevent overflow when calculating ulog block size
  • CVE-2025-3576: don't issue session keys with deprecated enctypes (RC4-HMAC-MD5 spoofing)
  • CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message
  • CVE-2026-40356: fix integer underflow in NegoEx parse_message header_len
  • CVE-2023-36054: ensure array count consistency in kadm5 RPC to prevent freeing uninitialized pointers in _xdr_kadm5_principal_ent_rec
Record
CLSA-2026-1779875639
Updated
2026-11-02
OSVCLSA-2026-1780398100 No score

krb5: Fix of 2 CVEs

  • CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message()
  • CVE-2026-40356: fix integer underflow and OOB read in NegoEx parse_message()
Record
CLSA-2026-1780398100
Updated
2026-11-02
OSVCLSA-2026-1782979178 No score

krb5: Fix of 2 CVEs

  • CVE-2026-40355: fix null pointer dereference in NegoEx parse_nego_message()
  • CVE-2026-40356: fix read overrun in NegoEx parse_message() via short header_len
Record
CLSA-2026-1782979178
Updated
2026-11-02
OSVCLSA-2026-1792592896 No score

krb5: Fix of 2 CVEs

  • CVE-2026-40355: NULL pointer dereference in parse_nego_message()
  • CVE-2026-40356: integer underflow and out-of-bounds read in parse_message()
Record
CLSA-2026-1792592896
Updated
2026-11-02
OSVCLSA-2026-1792593112 No score

krb5: Fix of 2 CVEs

  • CVE-2026-40355: NULL pointer dereference in parse_nego_message()
  • CVE-2026-40356: integer underflow and out-of-bounds read in parse_message()
Record
CLSA-2026-1792593112
Updated
2026-11-02
OSVMGASA-2026-0233 No score

Updated krb5 packages fix security vulnerabilities

CVE-2025-3576, A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering. CVE-2026-40355, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message. CVE-2026-40356, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Record
MGASA-2026-0233
Updated
2026-11-02
OSVopenSUSE-SU-2026:10729-1 No score

krb5-1.22.2-3.1 on GA media

These are all security issues fixed in the krb5-1.22.2-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10729-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21021-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
openSUSE-SU-2026:21021-1
Updated
2026-11-02
OSVSUSE-SU-2026:1816-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:1816-1
Updated
2026-11-02
OSVSUSE-SU-2026:21618-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:21618-1
Updated
2026-11-02
OSVSUSE-SU-2026:21629-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:21629-1
Updated
2026-11-02
OSVSUSE-SU-2026:22255-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:22255-1
Updated
2026-11-02
OSVSUSE-SU-2026:22322-1 No score

Security update for krb5

This update for krb5 fixes the following issues

  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:22322-1
Updated
2026-11-02
OSVSUSE-SU-2026:2449-1 No score

Security update for krb5

This update for krb5 fixes the following issues

Record
SUSE-SU-2026:2449-1
Updated
2026-11-02
OSVSUSE-SU-2026:2848-1 No score

Security update for krb5, krb5-mini

This update for krb5, krb5-mini fixes the following issues

  • CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
  • CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
  • CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
Record
SUSE-SU-2026:2848-1
Updated
2026-11-02
OSVUSN-8585-1 No score

krb5 vulnerabilities

It was discovered that Kerberos had an integer underflow vulnerability in the berval2tl_data() function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. (CVE-2026-11850)

It was discovered that Kerberos had vulnerabilities in its NegoEx mechanism parsing. A remote attacker could possibly use these issues to cause Kerberos to crash, resulting in a denial of service. (CVE-2026-40355, CVE-2026-40356)

Record
USN-8585-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
krb5-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-pkinit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-server
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-server-ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-workstation
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
libkadm5
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.2-34.el8_10
1.18.2-34.el8_10
krb5-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-libs
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-pkinit
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
Show 218 moreShow less
Affected packages
PackageAffectedFixed
krb5-server
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-server-ldap
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-workstation
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-xrealmauthz
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
libkadm5
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.21.3-10.el10_2
1.21.3-10.el10_2
krb5-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-pkinit
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-server-ldap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-workstation
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5-xrealmauthz
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
libkadm5
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.21.1-10.el9_8
1.21.1-10.el9_8
krb5
Azure Linux:3
 before 1.21.3-4
1.21.3-4
krb5
Alpaquita:25
 1.21.3-r0 up to 1.21.3-r2
1.21.3-r2
krb5
Alpaquita:stream
 1.20.1-r2 up to 1.22.2-r2
1.22.2-r2
krb5-devel
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-libs
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-pkinit
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-server
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-server-ldap
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-workstation
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
libkadm5
TuxCare:CentOS-Stream:8
From an advisory covering 5 CVEs
 before 1.18.2-27.el8.tuxcare.els2
1.18.2-27.el8.tuxcare.els2
krb5-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-pkinit
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-server
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-server-ldap
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-tests
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-workstation
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
libkadm5
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.21.1-8.el9_6.tuxcare.els1
1.21.1-8.el9_6.tuxcare.els1
krb5-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-pkinit
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-server
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-server-ldap
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-workstation
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
libkadm5
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 1.20.1-9.el9_2.tuxcare.els9
1.20.1-9.el9_2.tuxcare.els9
krb5-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-pkinit
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-server
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-server-ldap
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-workstation
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
libkadm5
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-libs
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-pkinit
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-server
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-server-ldap
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5-workstation
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
libkadm5
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 1.18.2-14.el8.tuxcare.els7
1.18.2-14.el8.tuxcare.els7
krb5
Debian:12
 before 1.20.1-2+deb12u5, plus listed versions
1.20.1-21.20.1-2+deb12u11.20.1-2+deb12u21.20.1-2+deb12u31.20.1-2+deb12u4
1.20.1-2+deb12u5
krb5
Debian:13
 before 1.21.3-5+deb13u1, plus listed versions
1.21.3-5
1.21.3-5+deb13u1
krb5
Debian:14
 before 1.22.1-2.1, plus listed versions
1.21.3-51.22.1-11.22.1-2
1.22.1-2.1
Kerberos_krb5_jll
Julia
 All versions None known
krb5
Mageia:9
From an advisory covering 3 CVEs
 before 1.20.1-1.5.mga9
1.20.1-1.5.mga9
krb5
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.21.2-20.oe2403sp1
1.21.2-20.oe2403sp1
krb5
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 1.21.2-20.oe2403sp3
1.21.2-20.oe2403sp3
krb5
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 1.18.2-23.oe2003sp4
1.18.2-23.oe2003sp4
krb5
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 1.19.2-30.oe2203sp4
1.19.2-30.oe2203sp4
krb5
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 1.21.2-20.oe2403
1.21.2-20.oe2403
krb5
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-libs
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-pkinit
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-server
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-server-ldap
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-tests
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-workstation
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5-xrealmauthz
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.22.2-7.hum1
0:1.22.2-7.hum1
krb5
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-pkinit
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-server
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-server-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-server-ldap
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-workstation
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-workstation-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
libkadm5
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
libkadm5-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-server-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-workstation-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-xrealmauthz-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
libkadm5-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-pkinit
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-server
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-server-ldap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-workstation
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-xrealmauthz
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
libkadm5
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-workstation-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-xrealmauthz-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
libkadm5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-pkinit
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-pkinit-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server-ldap
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-server-ldap-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-workstation
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-workstation-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-xrealmauthz
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-xrealmauthz-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
libkadm5
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
libkadm5-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-devel
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-libs-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-pkinit-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server-ldap-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-workstation-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
libkadm5-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-debugsource
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-libs
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-libs-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-pkinit
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-pkinit-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server-ldap
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-server-ldap-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-workstation
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-workstation-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
libkadm5
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
libkadm5-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:1.21.1-8.el9_6.2
0:1.21.1-8.el9_6.2
krb5-devel
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-debugsource
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-libs
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-libs-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-pkinit
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-pkinit-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-server
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-server-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-server-ldap
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-server-ldap-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-workstation
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-workstation-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
libkadm5
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
libkadm5-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.20.1-9.el9_2.6
0:1.20.1-9.el9_2.6
krb5-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-debugsource
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-devel
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-libs-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-pkinit-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server-ldap-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-workstation-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
libkadm5-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-debugsource
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-libs
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-libs-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-pkinit
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-pkinit-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server-ldap
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-server-ldap-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-workstation
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5-workstation-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
libkadm5
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
libkadm5-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:1.21.1-2.el9_4.5
0:1.21.1-2.el9_4.5
krb5
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.2-34.el8_10
0:1.18.2-34.el8_10
krb5
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:1.21.3-10.el10_2
0:1.21.3-10.el10_2
krb5
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.21.1-10.el9_8
0:1.21.1-10.el9_8
krb5
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 1.21.3-160000.3.1
1.21.3-160000.3.1
krb5
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 1.21.3-160000.3.1
1.21.3-160000.3.1
krb5
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 1.21.3-160000.3.1
1.21.3-160000.3.1
krb5
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 1.19.2-150400.3.21.1
1.19.2-150400.3.21.1
krb5
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 1.19.2-150400.3.21.1
1.19.2-150400.3.21.1
krb5
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 1.20.1-150600.11.19.1
1.20.1-150600.11.19.1
krb5
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 3 CVEs
 before 1.20.1-150600.11.19.1
1.20.1-150600.11.19.1
krb5
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 1.20.1-150600.11.19.1
1.20.1-150600.11.19.1
krb5
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 1.20.1-150600.11.19.1
1.20.1-150600.11.19.1
krb5
Ubuntu:22.04:LTS
 before 1.19.2-2ubuntu0.8, plus listed versions
1.18.3-61.18.3-71.19.2-0ubuntu11.19.2-11.19.2-2
Show 7 moreShow less
1.19.2-2ubuntu0.11.19.2-2ubuntu0.21.19.2-2ubuntu0.31.19.2-2ubuntu0.41.19.2-2ubuntu0.51.19.2-2ubuntu0.61.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
krb5
Ubuntu:24.04:LTS
 before 1.20.1-6ubuntu2.7, plus listed versions
1.20.1-3ubuntu11.20.1-5build11.20.1-6ubuntu11.20.1-6ubuntu21.20.1-6ubuntu2.1
Show 5 moreShow less
1.20.1-6ubuntu2.21.20.1-6ubuntu2.31.20.1-6ubuntu2.41.20.1-6ubuntu2.51.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
krb5
Ubuntu:25.10
 All versions, plus listed versions
1.21.3-4ubuntu21.21.3-5ubuntu11.21.3-5ubuntu2
 None known
krb5
Ubuntu:26.04:LTS
 before 1.22.1-2ubuntu4.1, plus listed versions
1.21.3-5ubuntu21.22.1-21.22.1-2ubuntu21.22.1-2ubuntu31.22.1-2ubuntu4
1.22.1-2ubuntu4.1
krb5
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 1.19.2-2ubuntu0.8, plus listed versions
1.18.3-61.18.3-71.19.2-0ubuntu11.19.2-11.19.2-2
Show 7 moreShow less
1.19.2-2ubuntu0.11.19.2-2ubuntu0.21.19.2-2ubuntu0.31.19.2-2ubuntu0.41.19.2-2ubuntu0.51.19.2-2ubuntu0.61.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
krb5
Ubuntu:24.04:LTS
From an advisory covering 3 CVEs
 before 1.20.1-6ubuntu2.7, plus listed versions
1.20.1-3ubuntu11.20.1-5build11.20.1-6ubuntu11.20.1-6ubuntu21.20.1-6ubuntu2.1
Show 5 moreShow less
1.20.1-6ubuntu2.21.20.1-6ubuntu2.31.20.1-6ubuntu2.41.20.1-6ubuntu2.51.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
krb5
Ubuntu:26.04:LTS
From an advisory covering 3 CVEs
 before 1.22.1-2ubuntu4.1, plus listed versions
1.21.3-5ubuntu21.22.1-21.22.1-2ubuntu21.22.1-2ubuntu31.22.1-2ubuntu4
1.22.1-2ubuntu4.1
krb5
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.22.2-3.1
1.22.2-3.1
krb5
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.21.3-160000.3.1
1.21.3-160000.3.1

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-40356 is a medium vulnerability (CVSS 5.9) in Mit Kerberos 5, published April 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. Fixed in krb5 1.21.3-4.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open