{"id":"CVE-2026-107884","aliases":["BELL-CVE-2026-107884","DEBIAN-CVE-2026-107884"],"status":"published","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-11-10T08:47:39.959699403Z","modified":"2026-11-12T07:15:03Z","fixes":[{"ecosystem":"Alpaquita:stream","package":"krb5","fixed_in":["1.22.3-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:stream","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.1-r2"},{"fixed":"1.22.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.1-2","1.20.1-2+deb12u1","1.20.1-2+deb12u2","1.20.1-2+deb12u3","1.20.1-2+deb12u4","1.20.1-2+deb12u5","1.20.1-2+loong64","1.20.1-3","1.20.1-4","1.20.1-5","1.20.1-5.1","1.20.1-5.1~exp1","1.20.1-6","1.21.2-1","1.21.3-1","1.21.3-2","1.21.3-3","1.21.3-4","1.21.3-5","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.3-5","1.21.3-5+deb13u1","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.3-5","1.22.1-1","1.22.1-2","1.22.1-2.1","1.22.1-3"]}],"references":[{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-107884","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-107884","tags":["advisory"]}],"sources":{"osv":[{"id":"BELL-CVE-2026-107884","status":"published","published":"2026-11-11T06:06:43.149128Z","modified":"2026-11-12T07:15:03.307115504Z","updated_at":"2026-11-12T07:34:29.179757Z"},{"id":"DEBIAN-CVE-2026-107884","status":"published","published":"2026-11-10T08:47:39.959699403Z","modified":"2026-11-10T09:00:06.261478766Z","updated_at":"2026-11-10T09:25:46.367164Z"}]}}