Red Hat Security Advisory

RHSA-2025:1352

krb5 security update

Released 2025-02-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) krb5-1.15.1-55.el7_9.4, krb5-devel-1.15.1-55.el7_9.4, krb5-devel-1.15.1-55.el7_9.4.ppc +8

Fixes 1 record

TI-2025-18245 CVE-2025-24528 · GHSA-wrjh-fhfj-xhfm

Integer overflow in moos-ivp Kerberos 5

LOW 32

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00507 Published 2026-01-16 Partial fix · 1.22 CWE-190