{"id":"CVE-2021-37750","aliases":["ALPINE-CVE-2021-37750","AZL-6608","BELL-CVE-2021-37750","DEBIAN-CVE-2021-37750","DLA-2771-1","EUVD-2021-24231","GHSA-p36j-vmfc-m4v5","OESA-2021-1329","RHSA-2021:3576","RHSA-2021:4788","RLSA-2021:3576","SUSE-SU-2021:3454-1","SUSE-SU-2021:3454-2","SUSE-SU-2022:4154-1","SUSE-SU-2024:1702-1","UBUNTU-CVE-2021-37750","USN-5959-1","openSUSE-SU-2021:1411-1","openSUSE-SU-2021:3454-1","openSUSE-SU-2024:10899-1"],"status":"published","title":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02505,"percentile":0.84962,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-08-23T00:00:00Z","modified":"2026-10-24T14:06:57Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"krb5","fixed_in":["1.18.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"krb5","fixed_in":["1.18.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"krb5","fixed_in":["1.18.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"krb5","fixed_in":["1.19.3-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"krb5","fixed_in":["1.19.3-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.18.3-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.18.3-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.18.3-7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"krb5","fixed_in":["1.18.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"krb5","fixed_in":["1.18.2-5.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-debuginfo","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-libs","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-pkinit","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-workstation","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libkadm5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-devel","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server-ldap","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-debuginfo","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-devel","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server-ldap","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-debuginfo","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-devel","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-libs","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-pkinit","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server-ldap","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-workstation","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libkadm5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-debuginfo","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-devel","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-libs","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-pkinit","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server-ldap","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-workstation","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libkadm5","fixed_in":["0:1.15.1-51.el7_9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"krb5","fixed_in":["1.16.3-46.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5","fixed_in":["1.16.3-46.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5","fixed_in":["1.16.3-46.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"krb5","fixed_in":["1.16-2ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"krb5","fixed_in":["1.17-6ubuntu4.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"krb5","fixed_in":["1.16.3-lp152.5.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"krb5-mini","fixed_in":["1.16.3-lp152.5.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"krb5","fixed_in":["1.16.3-3.24.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-7"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1+deb9u3"}]}],"versions":["1.15-1","1.15-1+deb9u1","1.15-1+deb9u2"],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-5.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-51.el7_9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.3.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-150000.6.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-46.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-46.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-46.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1","1.16-2ubuntu0.2","1.16-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.3"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4","1.17-6ubuntu4.1","1.17-6ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1","1.16-2ubuntu0.2","1.16-2ubuntu0.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.3"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4","1.17-6ubuntu4.1","1.17-6ubuntu4.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp152.5.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"krb5-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp152.5.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2.2"}]}],"bundled":20}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mit","product":"kerberos_5"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"starwindsoftware","product":"starwind_virtual_san"}],"references":[{"url":"https://web.mit.edu/kerberos/advisories/","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://github.com/krb5/krb5/releases","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20210923-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.starwindsoftware.com/security/sw-20220817-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37750","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2"},{"url":"https://security.netapp.com/advisory/ntap-20210923-0002"},{"url":"https://web.mit.edu/kerberos/advisories"},{"url":"https://www.starwindsoftware.com/security/sw-20220817-0004"},{"url":"https://github.com/advisories/GHSA-p36j-vmfc-m4v5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-37750","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-37750","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-37750","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1329","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3576","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996834","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3576.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36222","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36222","tags":["advisory"]},{"url":"https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37750","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4788","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4788.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:3576","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213454-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189929","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37750","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213454-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224154-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205126","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241702-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-37750","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5959-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-36222","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MHCRV6M5JSBYECPOLQFCUXBYMZFVXKCU/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4LN5FUC4TZVB7GKLTDOBR7UQD6W4262A/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36222","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T00:00:00Z","modified":"2026-10-14T11:49:13.44Z","updated_at":"2026-11-02T14:32:58.028461Z"}],"euvd":[{"id":"EUVD-2021-24231","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T00:00:00Z","modified":"2026-10-14T11:49:13Z","updated_at":"2026-11-02T17:27:16.356399Z"}],"ghsa":[{"id":"GHSA-p36j-vmfc-m4v5","title":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2022-05-24T19:11:58Z","modified":"2026-10-14T12:32:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:08.063Z","modified":"2026-10-14T12:17:15.293Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:57.318236Z"}],"osv":[{"id":"ALPINE-CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:08.063Z","modified":"2026-10-23T17:17:56.204976412Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6608","title":"CVE-2021-37750 affecting package krb5 for versions less than 1.19.3-1","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:08Z","modified":"2026-04-21T04:37:46.580881Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"BELL-CVE-2021-37750","title":"CVE-2021-37750 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:58.249816Z","modified":"2026-01-26T09:47:27.294952Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:08.063Z","modified":"2026-10-24T14:06:57.83386752Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:08.063Z","modified":"2026-10-15T09:47:31.664430649Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1329","title":"krb5 security update","description":"Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.\r\n\r\nSecurity Fix(es):\r\n\r\nThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.(CVE-2021-37750)","status":"published","published":"2021-09-03T11:04:35Z","modified":"2026-08-18T01:15:57.168132038Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:3576","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2024-09-16T06:12:11Z","modified":"2026-08-05T10:09:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4788","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2024-09-16T06:12:19Z","modified":"2026-08-05T10:09:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:3576","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).\n\nSecurity Fix(es):\n\n* krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS (CVE-2021-36222)\n\n* krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field (CVE-2021-37750)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-09-21T07:09:33Z","modified":"2026-02-04T15:30:17.522532Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-37750","description":"The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.","status":"published","published":"2021-08-23T05:15:00Z","modified":"2026-04-22T12:58:51.047108Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DLA-2771-1","title":"krb5 - security update","status":"published","published":"2021-09-30T00:00:00Z","modified":"2026-03-09T01:20:11.686302Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2021:1411-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-10-31T15:07:12Z","modified":"2026-02-04T03:19:40.505828Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3454-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929).\n","status":"published","published":"2021-10-18T07:29:54Z","modified":"2026-02-04T03:50:31.948754Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10899-1","title":"krb5-1.19.2-2.2 on GA media","description":"These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:44.135635Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2021:3454-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929).\n","status":"published","published":"2021-10-18T07:29:53Z","modified":"2026-02-04T03:07:48.01132Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3454-2","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929).\n","status":"published","published":"2021-12-06T18:58:17Z","modified":"2026-02-04T03:11:14.774433Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:4154-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field (bsc#1189929).\n- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).\n","status":"published","published":"2022-11-21T13:35:06Z","modified":"2025-05-02T04:31:42.848847Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2024:1702-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\nFixed inside previous release (v1.16.3-46.3.1):\n\n- CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacked a server field (bsc#1189929).\n","status":"published","published":"2024-05-20T18:09:12Z","modified":"2025-05-02T04:31:42.908997Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-5959-1","title":"krb5 vulnerabilities","description":"It was discovered that Kerberos incorrectly handled memory when processing\nKDC data, which could lead to a NULL pointer dereference. An attacker could\npossibly use this issue to cause a denial of service or have other\nunspecified impacts. (CVE-2021-36222, CVE-2021-37750)\n","status":"published","published":"2023-03-16T07:06:07Z","modified":"2026-04-22T10:34:01.832977Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}