Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

Rocky Linux 8.6 [CIQ] Security Update: krb5-devel / krb5-devel-debuginfo / krb5-libs / krb5-libs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0067)

🗓️ 01 Oct 2026 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 9 Views

Multiple vulnerabilities in Rocky Linux krb5 packages.

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in MIT Kerberos 5 (CVE-2020-28196) affects HMC
22 Nov 202106:03
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in krb5 affect PowerKVM (CVE-2016-3119, CVE-2016-3120)
18 Jun 201801:34
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by multiple Vulnerabilities
15 Mar 202510:43
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.
28 Apr 202510:33
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Security Network Intrusion Prevention System is affected by krb5 vulnerabilities (CVE-2014-4341, CVE-2013-1418 )
23 Feb 202219:48
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities
19 Jun 202505:35
–ibm
ibm
IBM Security Bulletins		IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index
31 Jan 202100:10
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Tivoli Access Manager for e-business and IBM Security Access Manager releases are affected by a Kerberos vulnerability (CVE-2017-11462)
17 Oct 201814:55
–ibm
ibm
IBM Security Bulletins		Security Bulletin: OpenSource MIT Kerberos Vulnerabilities affect IBM Security Access Manager for Web (CVE-2015-2695, CVE-2015-2696)
16 Jun 201821:41
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Privileged Identity Manager
16 Jun 201821:44
–ibm
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(358952);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/11");

  script_cve_id(
    "CVE-2006-3084",
    "CVE-2006-6143",
    "CVE-2006-6144",
    "CVE-2007-0956",
    "CVE-2007-0957",
    "CVE-2007-1216",
    "CVE-2007-2442",
    "CVE-2007-2443",
    "CVE-2007-2798",
    "CVE-2007-3999",
    "CVE-2007-4000",
    "CVE-2007-4743",
    "CVE-2007-5901",
    "CVE-2007-5971",
    "CVE-2008-0062",
    "CVE-2008-0063",
    "CVE-2008-0947",
    "CVE-2009-0844",
    "CVE-2009-0845",
    "CVE-2009-0846",
    "CVE-2009-0847",
    "CVE-2009-3295",
    "CVE-2009-4212",
    "CVE-2010-0283",
    "CVE-2010-0628",
    "CVE-2010-1322",
    "CVE-2010-4022",
    "CVE-2011-0281",
    "CVE-2011-0282",
    "CVE-2011-0283",
    "CVE-2011-0284",
    "CVE-2011-0285",
    "CVE-2011-1527",
    "CVE-2011-1528",
    "CVE-2011-1529",
    "CVE-2011-1530",
    "CVE-2012-1014",
    "CVE-2012-1015",
    "CVE-2013-1418",
    "CVE-2013-6800",
    "CVE-2014-4341",
    "CVE-2014-4342",
    "CVE-2014-4343",
    "CVE-2014-4344",
    "CVE-2014-4345",
    "CVE-2014-5352",
    "CVE-2014-5353",
    "CVE-2014-5354",
    "CVE-2014-5355",
    "CVE-2014-9421",
    "CVE-2014-9422",
    "CVE-2014-9423",
    "CVE-2015-2694",
    "CVE-2015-2695",
    "CVE-2015-2696",
    "CVE-2015-2697",
    "CVE-2015-2698",
    "CVE-2015-8629",
    "CVE-2015-8630",
    "CVE-2015-8631",
    "CVE-2016-3119",
    "CVE-2016-3120",
    "CVE-2017-11368",
    "CVE-2017-11462",
    "CVE-2017-15088",
    "CVE-2018-5729",
    "CVE-2018-5730",
    "CVE-2020-17049",
    "CVE-2020-28196",
    "CVE-2021-36222",
    "CVE-2021-37750",
    "CVE-2024-3596"
  );

  script_name(english:"Rocky Linux 8.6 [CIQ] Security Update: krb5-devel / krb5-devel-debuginfo / krb5-libs / krb5-libs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0067)");

  script_set_attribute(attribute:"synopsis", value:
"The Rocky Linux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ
ciqsa-2026_0067 advisory.

    This advisory aggregates security fixes for the krb5 SRPM in CIQ LTS 8.6. It addresses 72 CVEs:
    CVE-2008-0947, CVE-2016-3120, CVE-2012-1014, CVE-2017-15088, CVE-2014-9422, and 67 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-0957.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?01e654af");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-8629.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?021f92c9");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-4341.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0703a7da");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-0283.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0d6b0c36");
  script_set_attribute(attribute:"see_also", value:"https://github.com/ctrliq/advisories");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2020/cve-2020-17049.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0e668128");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-0847.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?126a9366");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-2696.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1295e153");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-2443.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?18633930");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-5901.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?19af3fbe");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-8631.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1e9c800a");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-0846.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?2a8019a9");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2008/cve-2008-0063.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?2c0a7046");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2024/cve-2024-3596.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?2f48f020");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-1530.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?39647cfa");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-0956.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?3a523f7e");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-3295.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4255357f");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-2442.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?46315139");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2010/cve-2010-0283.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?492ec55a");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-2695.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?493cef05");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-1216.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?499c4a0c");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-1527.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?49c7a005");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-5353.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4e8f9b98");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2013/cve-2013-1418.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4e92f092");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-3999.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?530109cc");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-5355.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?53a41c1e");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-0845.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?57a66256");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-0282.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?58a50fd1");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-2698.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?59331049");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-8630.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5f84b2fb");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-5971.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6231ce55");
  # https://github.com/ctrliq/advisories/blob/main/csaf/advisories/ciq/2026/ciqsa-2026_0067.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?661efbf8");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-0281.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?662f2683");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2017/cve-2017-15088.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6b3a68f2");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2018/cve-2018-5730.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6b9e83b3");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-0285.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?71a701dd");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2013/cve-2013-6800.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?78e1a28f");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2017/cve-2017-11368.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?7cfd4e1e");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-9423.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?7ddfc4ef");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2020/cve-2020-28196.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8336561b");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2016/cve-2016-3120.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?89a3cf87");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-9422.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8a51f2f5");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2010/cve-2010-1322.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?912e179d");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2021/cve-2021-37750.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?92edb7b0");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2018/cve-2018-5729.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a23c9fb2");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2006/cve-2006-6144.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a2d8fe97");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-4000.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a2f73474");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2006/cve-2006-3084.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a48e08b0");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-4345.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a8cf3719");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2012/cve-2012-1015.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?abbe1af9");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2017/cve-2017-11462.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?af887037");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-4343.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b085df33");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-2694.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b0f32d96");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-4344.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b48d9d8e");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-0844.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b6f4e9dc");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-4342.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b7102f50");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2010/cve-2010-0628.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b99831dd");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2016/cve-2016-3119.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c23021ee");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2021/cve-2021-36222.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c47cfe67");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-1529.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c4be6ada");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2010/cve-2010-4022.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c695ce10");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2012/cve-2012-1014.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c89a1379");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-5352.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d02ec13a");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2006/cve-2006-6143.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d40664e6");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-4743.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?dd3521c5");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-1528.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?dd61a012");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2011/cve-2011-0284.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e08482d9");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-9421.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e241f44e");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2015/cve-2015-2697.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e2815de1");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2008/cve-2008-0062.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e8891604");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2008/cve-2008-0947.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?eb4814cf");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2009/cve-2009-4212.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f2bd53fe");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2007/cve-2007-2798.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f2bf10c4");
  # https://github.com/ctrliq/advisories/blob/main/csaf/vex/cve/2014/cve-2014-5354.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f6e1b304");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages based on the guidance in CIQ advisory ciqsa-2026_0067.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_supplemental", value:"CVSS:4.0/R:A");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2011-0285");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2017-15088");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2024-3596");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"vendor_severity", value:"Critical");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/11/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/01");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Rocky Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/OS/extended-third-party", "Host/local_checks_enabled", "Host/RockyLinux/release", "Host/RockyLinux/rpm-list", "Host/cpu");

  exit(0);
}
include('rpm2.inc');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (empty_or_null(third_party_support) || third_party_support != 'CIQ') exit(0, 'CIQ support not enabled.');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'Rocky Linux' >!< os_product) audit(AUDIT_OS_NOT, 'Rocky Linux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Rocky Linux');
if (! preg(pattern:"^8.6([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Rocky Linux 8.6', 'Rocky Linux ' + os_version);

if (!get_kb_item('Host/RockyLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('aarch64' >!< cpu && cpu !~ "^i[3-6]86$" && 'x86_64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Rocky Linux', cpu);


var constraints = [
  {
    'release': '8',
    'sp': '6',
    'pkgs': [
      {'reference':'krb5-devel-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-devel-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-devel-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-devel-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-devel-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-devel-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-libs-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-pkinit-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-server-ldap-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'krb5-workstation-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'aarch64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'i686', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
      {'reference':'libkadm5-debuginfo-1.18.2-16.el8_6.86ciq_lts', 'sp':'6', 'cpu':'x86_64', 'el_string':'el8_6', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}


if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'krb5-devel / krb5-devel-debuginfo / krb5-libs / krb5-libs-debuginfo / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Oct 2026 00:00Current
6.7Medium risk
Vulners AI Score6.7
CVSS 210
CVSS 3.16.6 - 9.8
CVSS 39.8
EPSS0.40345
SSVC
Rocky Linuxkrb5krb5-develkrb5-libsciqsa-2026_0067
9