K5
Product
Kerberos 5
140
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 13Medium 13Low 3
Watch
Add Kerberos 5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39975 | 8.8 | Aug 16 | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure Affected: 1.21 before 1.21.2 |
| CVE-2022-42898 | 8.8 | Dec 25 | PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos… Affected: 1.8 before 1.19.4; 1.20; 1.20 |
| CVE-2026-40356 | 7.5 | Apr 28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a… Affected: 1.18 before 1.22.3 |
| CVE-2026-40355 | 7.5 | Apr 28 | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in… Affected: 1.18 before 1.22.3 |
| CVE-2024-37370 | 7.5 | Jun 28 | In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear… Affected: before 1.21.3 |
| CVE-2024-26461 | 7.5 | Feb 29 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c Affected: 1.21.2 |
| CVE-2022-39028 | 7.5 | Aug 30 | telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8 Affected: through 1.0.3 |
| CVE-2021-36222 | 7.5 | Jul 22 | ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL… Affected: before 1.18.4; 1.19.0 before 1.19.2 |
| CVE-2020-28196 | 7.5 | Nov 6 | MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support… Affected: before 1.17.2; 1.18.0 before 1.18.3 |
| CVE-2019-14844 | 7.5 | Sep 26 | A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes" Affected: 1.16.1 through 1.17.1 |
| CVE-2015-8630 | 7.5 | Feb 13 | The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4… Affected: 1.12; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +8 more |
| CVE-2008-0063 | 7.5 | Mar 19 | The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote… Affected: through 1.6.3 |
| CVE-2025-24528 | 7.1 | Jan 16 | In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c Affected: 1.7 before 1.22 |
Showing 13