In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

🗓️ 21 Jan 2026 09:04:46Reported by MicrosoftType

Krb5 before 1.22 allows resize overflow in kdb_log.c leading to out-of-bounds write and kadmind crash.

Reporter	Title	Published	Views	Family All 152
IBM Security Bulletins	Security Bulletin: There is an Out-of-Bounds write vulnerability in MIT's Kerberos 5 that is shipped with IBM TXSeries for Multiplatforms (CVE-2025-24528).	29 Apr 202512:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	28 Aug 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	15 Jun 202513:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	8 Nov 202516:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	21 Oct 202514:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	30 Jun 202513:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	3 Jul 202510:30	–	ibm
ATTACKERKB	CVE-2025-24528	16 Jan 202600:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : krb5-devel, krb5-libs, krb5-pkinit (ALAS2023-2025-1173)	8 Sep 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : krb5, --advisory ALAS2-2025-2985 (ALAS-2025-2985)	4 Sep 202500:00	–	nessus