Red Hat Security Advisory

RHSA-2024:9331

krb5 security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) krb5-devel-1.21.1-3.el9
Red Hat Enterprise Linux BaseOS (v. 9) krb5-1.21.1-3.el9, krb5-libs-1.21.1-3.el9, krb5-pkinit-1.21.1-3.el9 +4

TI-2024-17421 CVE-2024-26461 · GHSA-jc8v-q399-gfq9

HIGH 72

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01128 Published 2024-02-26 Partial fix CWE-770

TI-2024-17422 CVE-2024-26462 · GHSA-rgrc-qmj6-x9mf

MEDIUM 58

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00433 Published 2024-02-26 Partial fix CWE-401

TI-2024-17420 CVE-2024-26458 · GHSA-qp5h-mm28-4jq3

LOW 26

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00815 Published 2024-02-26 Partial fix CWE-401