Red Hat Security Advisory

RHSA-2024:3268

krb5 security update

Released 2024-05-22 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) krb5-1.18.2-27.el8_10, krb5-devel-1.18.2-27.el8_10, krb5-libs-1.18.2-27.el8_10 +5

TI-2024-17421 CVE-2024-26461 · GHSA-jc8v-q399-gfq9

HIGH 72

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01128 Published 2024-02-26 Partial fix CWE-770

TI-2024-17420 CVE-2024-26458 · GHSA-qp5h-mm28-4jq3

LOW 26

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00815 Published 2024-02-26 Partial fix CWE-401