{"id":"CVE-2025-24528","aliases":["ALSA-2025:2722","ALSA-2025:7067","AZL-74852","AZL-74862","BELL-CVE-2025-24528","CLSA-2025-1742662173","CLSA-2025-1742723370","CLSA-2025-1755791979","CLSA-2025-1756110212","CLSA-2025-1759506149","CLSA-2026-1779875639","DEBIAN-CVE-2025-24528","DLA-4065-1","EUVD-2026-2883","GHSA-wrjh-fhfj-xhfm","MGASA-2025-0072","OESA-2025-1135","RHSA-2025:1352","RHSA-2025:2722","RHSA-2025:7067","RLSA-2025:2722","RLSA-2025:7067","SUSE-SU-2025:0304-1","SUSE-SU-2025:0343-1","SUSE-SU-2025:0351-1","SUSE-SU-2025:0401-1","SUSE-SU-2025:0822-1","SUSE-SU-2025:20153-1","SUSE-SU-2025:20303-1","UBUNTU-CVE-2025-24528","USN-7314-1","openSUSE-SU-2025:14736-1"],"status":"published","title":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer...","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00507,"percentile":0.43603,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-01-30T05:56:50.531937Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"krb5-devel","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"krb5-libs","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"krb5-pkinit","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"krb5-server","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"krb5-server-ldap","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"krb5-workstation","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libkadm5","fixed_in":["1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-devel","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-libs","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-pkinit","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-server","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-server-ldap","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-workstation","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libkadm5","fixed_in":["1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"krb5","fixed_in":["1.21.3-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"krb5","fixed_in":["1.19.4-5"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"krb5","fixed_in":["1.20.2-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"krb5","fixed_in":["1.21.3-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"krb5","fixed_in":["1.21.3-r1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-devel","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-libs","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-pkinit","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-server","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-server-ldap","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"krb5-workstation","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libkadm5","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-devel","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-libs","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-pkinit","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-server","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-server-ldap","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"krb5-workstation","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libkadm5","fixed_in":["1.18.2-14.el8.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-devel","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-libs","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-pkinit","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-server","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-server-ldap","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"krb5-workstation","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libkadm5","fixed_in":["1.15.1-55.el7_9.99.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-devel","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-libs","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-pkinit","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-server","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-server-ldap","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"krb5-workstation","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libkadm5","fixed_in":["1.15.1-55.0.7.el7_9.99.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.20.1-2+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.21.3-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.21.3-5"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"krb5","fixed_in":["1.18.3-6+deb11u6"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"krb5","fixed_in":["1.20.1-1.4.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"krb5","fixed_in":["1.19.2-23.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"krb5","fixed_in":["1.19.2-23.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"krb5","fixed_in":["1.21.2-14.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"krb5","fixed_in":["1.21.2-14.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"krb5","fixed_in":["1.18.2-17.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-debuginfo","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-devel","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-libs","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-pkinit","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-server","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-server-ldap","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"krb5-workstation","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libkadm5","fixed_in":["0:1.15.1-55.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debugsource","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5-debuginfo","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-debugsource","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-devel","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-libs-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-pkinit-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-server-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-server-ldap-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-workstation-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libkadm5-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debugsource","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5-debuginfo","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"krb5","fixed_in":["0:1.18.2-31.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"krb5","fixed_in":["0:1.21.1-6.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"krb5","fixed_in":["1.20.1-150500.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"krb5","fixed_in":["1.19.2-150400.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"krb5","fixed_in":["1.19.2-150400.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"krb5","fixed_in":["1.16.3-46.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"crypto-policies","fixed_in":["20230920.570ea89-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"krb5","fixed_in":["1.20.1-150600.11.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"krb5","fixed_in":["1.20.1-150600.11.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"crypto-policies","fixed_in":["20230920.570ea89-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"krb5","fixed_in":["1.20.1-150600.11.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"krb5","fixed_in":["1.19.2-150300.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"krb5","fixed_in":["1.19.2-150300.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"krb5","fixed_in":["1.20.1-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"krb5","fixed_in":["1.21.3-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"krb5","fixed_in":["1.17-6ubuntu4.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"krb5","fixed_in":["1.19.2-2ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"krb5","fixed_in":["1.20.1-6ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"krb5","fixed_in":["1.21.3-4ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"krb5","fixed_in":["1.21.3-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4-5"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.1-r0"},{"fixed":"1.20.2-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.3-r0"},{"fixed":"1.21.3-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.1-r2"},{"fixed":"1.21.3-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-14.el8.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.el7_9.99.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-9.el9_2.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-55.0.7.el7_9.99.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-2+deb12u3"}]}],"versions":["1.20.1-2","1.20.1-2+deb12u1","1.20.1-2+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-6+deb11u6"}]}],"versions":["1.18.3-6","1.18.3-6+deb11u1","1.18.3-6+deb11u2","1.18.3-6+deb11u3","1.18.3-6+deb11u4","1.18.3-6+deb11u5"]},{"source":"osv","ecosystem":"Mageia:9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1.4.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-23.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-23.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-14.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.2-14.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-17.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-55.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-31.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.1-6.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150500.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-150400.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-150400.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-46.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"crypto-policies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230920.570ea89-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150600.11.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150600.11.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"crypto-policies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230920.570ea89-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150600.11.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-150300.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-150300.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1","1.12+dfsg-2ubuntu5.2","1.12+dfsg-2ubuntu5.3","1.12+dfsg-2ubuntu5.4","1.12+dfsg-2ubuntu5.4+esm1","1.12+dfsg-2ubuntu5.4+esm2","1.12+dfsg-2ubuntu5.4+esm3","1.12+dfsg-2ubuntu5.4+esm4","1.12+dfsg-2ubuntu5.4+esm5","1.12+dfsg-2ubuntu5.4+esm6","1.12+dfsg-2ubuntu5.4+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg-2","1.13.2+dfsg-3","1.13.2+dfsg-4","1.13.2+dfsg-5","1.13.2+dfsg-5ubuntu1","1.13.2+dfsg-5ubuntu2","1.13.2+dfsg-5ubuntu2.1","1.13.2+dfsg-5ubuntu2.1+esm1","1.13.2+dfsg-5ubuntu2.2","1.13.2+dfsg-5ubuntu2.2+esm1","1.13.2+dfsg-5ubuntu2.2+esm2","1.13.2+dfsg-5ubuntu2.2+esm3","1.13.2+dfsg-5ubuntu2.2+esm4","1.13.2+dfsg-5ubuntu2.2+esm5","1.13.2+dfsg-5ubuntu2.2+esm6","1.13.2+dfsg-5ubuntu2.2+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1","1.16-2ubuntu0.1+esm1","1.16-2ubuntu0.2","1.16-2ubuntu0.3","1.16-2ubuntu0.4","1.16-2ubuntu0.4+esm1","1.16-2ubuntu0.4+esm2","1.16-2ubuntu0.4+esm3","1.16-2ubuntu0.4+esm5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.9"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4","1.17-6ubuntu4.1","1.17-6ubuntu4.2","1.17-6ubuntu4.3","1.17-6ubuntu4.4","1.17-6ubuntu4.6","1.17-6ubuntu4.7","1.17-6ubuntu4.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2ubuntu0.6"}]}],"versions":["1.18.3-6","1.18.3-7","1.19.2-0ubuntu1","1.19.2-1","1.19.2-2","1.19.2-2ubuntu0.1","1.19.2-2ubuntu0.2","1.19.2-2ubuntu0.3","1.19.2-2ubuntu0.4","1.19.2-2ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-6ubuntu2.5"}]}],"versions":["1.20.1-3ubuntu1","1.20.1-5build1","1.20.1-6ubuntu1","1.20.1-6ubuntu2","1.20.1-6ubuntu2.1","1.20.1-6ubuntu2.2","1.20.1-6ubuntu2.3","1.20.1-6ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-4ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.9"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4","1.17-6ubuntu4.1","1.17-6ubuntu4.2","1.17-6ubuntu4.3","1.17-6ubuntu4.4","1.17-6ubuntu4.6","1.17-6ubuntu4.7","1.17-6ubuntu4.8"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2ubuntu0.6"}]}],"versions":["1.18.3-6","1.18.3-7","1.19.2-0ubuntu1","1.19.2-1","1.19.2-2","1.19.2-2ubuntu0.1","1.19.2-2ubuntu0.2","1.19.2-2ubuntu0.3","1.19.2-2ubuntu0.4","1.19.2-2ubuntu0.5"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-6ubuntu2.5"}]}],"versions":["1.20.1-3ubuntu1","1.20.1-5build1","1.20.1-6ubuntu1","1.20.1-6ubuntu2","1.20.1-6ubuntu2.1","1.20.1-6ubuntu2.2","1.20.1-6ubuntu2.3","1.20.1-6ubuntu2.4"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.3-2.1"}]}]}],"products":[{"vendor":"mit","product":"kerberos 5"}],"references":[{"url":"https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0","tags":["fix","article"]},{"url":"https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24528","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wrjh-fhfj-xhfm"},{"url":"https://access.redhat.com/errata/RHSA-2025:2722","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24528","tags":["report"]},{"url":"https://bugzilla.redhat.com/2342796","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-2722.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7067","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7067.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-24528","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1742662173.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1742723370.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1755791979.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1756110212.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1759506149.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779875639.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24528.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-24528","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0072.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34040","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VLIGTCER7WVUGDD5KJI3RHPHU5VI7UCF/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1135","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1352","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342796","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1352.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24528","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2722.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-4902","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-76759","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7067.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:2722","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7067","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250304-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24528","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250343-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250351-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250401-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250822-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520153-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520303-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-24528","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7314-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-26458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-26461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-26462","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-01-16T18:06:59.339Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:44.11109Z"}],"euvd":[{"id":"EUVD-2026-2883","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-01-16T18:06:59Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:50.882066Z"}],"ghsa":[{"id":"GHSA-wrjh-fhfj-xhfm","title":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer...","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T18:31:33Z","modified":"2026-01-16T21:30:36Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:05:38.741943Z"}],"nvd":[{"id":"CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T18:16:06.633Z","modified":"2026-06-17T08:59:10.53Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:11:57.915063Z"}],"osv":[{"id":"BELL-CVE-2025-24528","status":"published","published":"2025-01-30T05:56:50.531937Z","modified":"2026-01-26T09:38:56.529887Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.491466Z"},{"id":"CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T00:00:00Z","modified":"2026-10-28T10:40:32.07269825Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T18:16:06.633Z","modified":"2026-09-01T20:05:44.646891329Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1135","title":"krb5 security update","description":"Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.\r\n\r\nSecurity Fix(es):\n\nIn MIT krb5 release 1.7 and later with incremental propagation\nenabled, an authenticated attacker can cause kadmind to write beyond\nthe end of the mapped region for the iprop log file, likely causing a\nprocess crash.(CVE-2025-24528)","status":"published","published":"2025-02-14T11:08:13Z","modified":"2026-08-18T01:17:42.99694452Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2025:1352","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2025-02-13T10:05:00Z","modified":"2026-09-09T10:04:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:2722","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2025-03-14T10:09:01Z","modified":"2026-09-09T10:06:14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7067","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2025-05-13T10:04:59Z","modified":"2026-09-09T10:06:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:2722","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).\n\nSecurity Fix:\n\n* CVE-2025-24528 krb5: overflow when calculating ulog block size\n\nBug fix:\n\n* kdb5_util: fix DB entry flags on modification\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:22:23.04237Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7067","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).\n\nSecurity Fix(es):\n\n* krb5: overflow when calculating ulog block size (CVE-2025-24528)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:24.060494Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2025-01-31T00:00:00Z","modified":"2026-05-29T10:45:33.649489419Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:2722","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  \n\nSecurity Fix:  \n\n  * CVE-2025-24528 krb5: overflow when calculating ulog block size\n\n\nBug fix:  \n\n  * kdb5_util: fix DB entry flags on modification\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-03-13T00:00:00Z","modified":"2026-10-29T11:02:28.264447653Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7067","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).  \n\nSecurity Fix(es):  \n\n  * krb5: overflow when calculating ulog block size (CVE-2025-24528)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:31:39.396262625Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-74852","title":"CVE-2025-24528 affecting package krb5 for versions less than 1.21.3-3","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T18:16:06Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"AZL-74862","title":"CVE-2025-24528 affecting package krb5 for versions less than 1.19.4-5","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","status":"published","published":"2026-01-16T18:16:06Z","modified":"2026-04-21T04:38:47.961748Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"CLSA-2025-1742662173","title":"krb5: Fix of CVE-2025-24528","description":"- CVE-2025-24528: prevent overflow when calculating ulog block size","status":"published","published":"2025-03-22T16:49:39Z","modified":"2026-06-01T00:33:23.091691501Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1742723370","title":"krb5: Fix of CVE-2025-24528","description":"- CVE-2025-24528: prevent overflow when calculating ulog block size","status":"published","published":"2025-03-23T09:49:35Z","modified":"2026-06-01T00:33:20.991863999Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1755791979","title":"krb5: Fix of CVE-2025-24528","description":"- CVE-2025-24528: fix buffer overflow vulnerability in iprop log file\n  writing","status":"published","published":"2025-08-21T15:59:43Z","modified":"2026-06-01T00:33:27.573152348Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1756110212","title":"krb5: Fix of 2 CVEs","description":"- CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages\n  using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design\n- CVE-2025-24528: prevent overflow when calculating ulog block size","status":"published","published":"2025-08-25T08:23:36Z","modified":"2026-10-21T10:46:04.174347387Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1759506149","title":"krb5: Fix of 2 CVEs","description":"- CVE-2025-24528: fix buffer overflow vulnerability in iprop log file\n  writing","status":"published","published":"2026-07-01T17:16:50Z","modified":"2026-10-26T09:31:54.547590891Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1779875639","title":"krb5: Fix of 5 CVEs","description":"- CVE-2025-24528: prevent overflow when calculating ulog block size\n- CVE-2025-3576: don't issue session keys with deprecated enctypes (RC4-HMAC-MD5 spoofing)\n- CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message\n- CVE-2026-40356: fix integer underflow in NegoEx parse_message header_len\n- CVE-2023-36054: ensure array count consistency in kadm5 RPC to prevent freeing uninitialized pointers in _xdr_kadm5_principal_ent_rec","status":"published","published":"2026-05-27T09:54:03Z","modified":"2026-10-26T09:43:19.111601002Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"DLA-4065-1","title":"krb5 - security update","status":"published","published":"2025-02-23T00:00:00Z","modified":"2026-03-09T01:18:11.258263Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0072","title":"Updated krb5 packages fix security vulnerability","description":"Overflow when calculating ulog block size. (CVE-2025-24528)\n","status":"published","published":"2025-02-25T16:58:04Z","modified":"2026-04-16T04:41:37.40839143Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14736-1","title":"krb5-1.21.3-2.1 on GA media","description":"These are all security issues fixed in the krb5-1.21.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-06T00:00:00Z","modified":"2026-02-04T02:59:24.874892Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2025:0304-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).\n","status":"published","published":"2025-01-30T14:52:21Z","modified":"2026-02-04T02:32:20.022345Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:0343-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).\n","status":"published","published":"2025-02-03T17:03:58Z","modified":"2025-05-02T04:37:32.593714Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0351-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).\n","status":"published","published":"2025-02-04T09:28:21Z","modified":"2026-02-04T03:18:24.82893Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0401-1","title":"Security update for crypto-policies, krb5","description":"This update for crypto-policies and krb5 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).\n\nFeature addition:\n\n- Add crypto-policies support; (jsc#PED-12018)\n\n  * The default krb5.conf has been updated to include config\n    snippets in the krb5.conf.d directory, where crypto-policies\n    drops its.\n\n- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); \n\n  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96 \n    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active\n    directory. If these encryption types are allowed or not in \n    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.\n","status":"published","published":"2025-02-10T09:38:29Z","modified":"2026-02-04T04:11:54.795016Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0822-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).\n","status":"published","published":"2025-03-10T15:33:40Z","modified":"2026-02-04T02:24:17.304675Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:20153-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Prevent overflow when calculating ulog block size.\n  An authenticated attacker can cause kadmind to write beyond the end\n  of the mapped region for the iprop log file, likely causing a process\n  crash (bsc#1236619).\n","status":"published","published":"2025-03-19T10:42:10Z","modified":"2026-03-23T04:48:11.141585Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20303-1","title":"Security update for krb5","description":"This update for krb5 fixes the following issues:\n\n- CVE-2025-24528: Prevent overflow when calculating ulog block size.\n  An authenticated attacker can cause kadmind to write beyond the end\n  of the mapped region for the iprop log file, likely causing a process\n  crash; ((bsc#1236619).\n","status":"published","published":"2025-05-08T12:22:20Z","modified":"2026-03-23T04:48:13.475787Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7314-1","title":"krb5 vulnerabilities","description":"It was discovered that Kerberos incorrectly handled certain memory\noperations. A remote attacker could possibly use this issue to cause\nKerberos to consume memory,leading to a denial of service. (CVE-2024-26458,\nCVE-2024-26461)\n\nIt was discovered that Kerberos incorrectly handled certain memory\noperations. A remote attacker could possibly use this issue to cause\nKerberos to consume memory,leading to a denial of service. This issue only\naffected Ubuntu 24.04 LTS. (CVE-2024-26462)\n\nIt was discovered that the Kerberos kadmind daemon incorrectly handled log\nfiles when incremental propagation was enabled. An authenticated attacker\ncould use this issue to cause kadmind to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. (CVE-2025-24528)\n","status":"published","published":"2025-03-03T12:40:28Z","modified":"2026-04-27T18:02:23.125086742Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}