Mit Kerberos 5 vulnerabilities

• mit kerberos 5 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... CVE-2026-40356 Fix available 5.9 MediumApril 28, 2026
• mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application... CVE-2026-40355 Fix available 5.9 MediumApril 28, 2026
• mit kerberos 5, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS... CVE-2024-37371 Fix available 9.1 CriticalJune 28, 2024
• mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count... CVE-2024-37370 Fix available 7.5 HighJune 28, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• mit kerberos 5 kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is... CVE-2023-39975 Fix available 8.8 HighAugust 16, 2023
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• heimdal project heimdal, mit kerberos 5, samba +3 more +5 more Important: krb5 security update CVE-2022-42898 Fix available 8.8 HighNovember 19, 2022
• debian linux, gnu inetutils, mit kerberos 5 +1 more +3 more telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a... CVE-2022-39028 Fix available 7.5 HighAugust 30, 2022
• mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 more The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... CVE-2021-37750 Fix available 6.5 MediumAugust 23, 2021
• mit kerberos 5, debian linux, netapp active iq unified manager +7 more +9 more ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... CVE-2021-36222 Fix available EPSS 10.5% 7.5 HighJuly 22, 2021
• mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 more MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... CVE-2020-28196 Fix available 7.5 HighNovember 6, 2020
• fedoraproject fedora, mit krb5, kerberos 5 +2 more A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a... CVE-2019-14844 7.5 HighSeptember 26, 2019
• debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 more MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... CVE-2018-5730 Fix available 3.8 LowMarch 1, 2018
• debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 more MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP... CVE-2018-5729 Fix available 4.7 MediumMarch 1, 2018
• mit krb5, kerberos 5, redhat enterprise linux +3 more +5 more An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1... CVE-2017-7562 Fix available 6.5 MediumNovember 20, 2017
• mit kerberos 5 plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2... CVE-2017-15088 Fix available 9.8 CriticalNovember 8, 2017
• mit kerberos 5, fedoraproject fedora +1 more Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified... CVE-2017-11462 Fix available 9.8 CriticalSeptember 13, 2017
• mit kerberos, kerberos 5, fedoraproject fedora +2 more In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion... CVE-2017-11368 Fix available 6.5 MediumAugust 9, 2017
• mit kerberos 5 The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT... CVE-2016-3120 Fix available 6.5 MediumAugust 1, 2016
• mit kerberos 5, opensuse leap, opensuse +2 more The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... CVE-2016-3119 Fix available EPSS 39.8% 5.3 MediumMarch 25, 2016
• mit kerberos 5 The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv... CVE-2015-8630 Fix available 7.5 HighFebruary 5, 2016
• mit kerberos 5, debian linux, opensuse leap +7 more +9 more Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)... CVE-2015-8631 Fix available 6.5 MediumFebruary 4, 2016
• mit kerberos 5, debian linux, opensuse leap +8 more +10 more The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)... CVE-2015-8629 Fix available 5.3 MediumFebruary 4, 2016
• mit kerberos 5 The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka... CVE-2015-2698 Fix available 8.5 HighNovember 6, 2015
• mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 more The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... CVE-2015-2697 Fix available 4.0 MediumOctober 30, 2015
• mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 more lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... CVE-2015-2696 Fix available 7.1 HighOctober 30, 2015
• mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 more lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... CVE-2015-2695 Fix available 5.0 MediumOctober 30, 2015
• mit kerberos 5 The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not... CVE-2015-2694 Fix available 5.8 MediumMay 25, 2015
• mit kerberos 5 MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field... CVE-2014-5355 Fix available 5.0 MediumFebruary 20, 2015
• mit kerberos 5 The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5... CVE-2014-9423 Fix available 5.0 MediumJanuary 21, 2015
• mit kerberos 5 The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka... CVE-2014-9422 Fix available 6.1 MediumJanuary 21, 2015
• mit kerberos 5 The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)... CVE-2014-9421 Fix available 9.0 HighJanuary 21, 2015
• mit kerberos 5 The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the... CVE-2014-5352 Fix available 9.0 HighJanuary 21, 2015
• mit kerberos, kerberos 5 +1 more plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x... CVE-2014-5354 Fix available 3.5 LowDecember 16, 2014
• mit kerberos 5, canonical ubuntu linux, debian linux +9 more +11 more The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap... CVE-2014-5353 Fix available 3.5 LowDecember 16, 2014
• mit kerberos 5 The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT... CVE-2014-5351 Fix available 2.1 LowOctober 9, 2014
• mit kerberos 5 Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap... CVE-2014-4345 Fix available 8.5 HighAugust 8, 2014
• mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 more The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT... CVE-2014-4344 Fix available 7.8 HighJuly 21, 2014
• mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 more Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... CVE-2014-4343 Fix available 7.6 HighJuly 21, 2014
• mit kerberos, kerberos 5, debian linux +4 more +6 more MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a... CVE-2014-4342 Fix available 5.0 MediumJuly 20, 2014
• mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 more MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ... CVE-2014-4341 Fix available 5.0 MediumJuly 20, 2014
• mit kerberos 5 do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4... CVE-2013-1417 Fix available 3.5 LowNovember 20, 2013
• mit kerberos, kerberos 5 +1 more An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos... CVE-2013-6800 4.0 MediumNovember 16, 2013
• mit kerberos 5, debian linux, opensuse +2 more The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ... CVE-2013-1418 Fix available 4.3 MediumNovember 16, 2013
• mit kerberos 5, canonical ubuntu linux, debian linux +7 more +9 more schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not... CVE-2002-2443 Fix available 5.0 MediumMay 10, 2013
• mit kerberos 5, fedoraproject fedora, opensuse +5 more +7 more The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT... CVE-2013-1416 Fix available 4.0 MediumApril 19, 2013
• mit kerberos 5, opensuse +1 more The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the... CVE-2013-1415 Fix available 5.0 MediumMarch 3, 2013
• Show olderLoading…