PT-2026-140976

The AUTH GSSAPI handler in lib/rpc/svc auth gssapi.c in MIT Kerberos 5 aka krb5 does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service memory exhaustion in kadmind via crafted AUTH GSSAPI INIT requests that trigger authentication failure...

PT-2026-140962

The AUTH GSSAPI handler in lib/rpc/svc auth gssapi.c in MIT Kerberos 5 aka krb5 1.5.2 and later allows remote attackers to cause a denial of service memory exhaustion in kadmind by sending repeated failed AUTH GSSAPI INIT requests. Each failed request allocates client state that is only freed aft...

PT-2026-140961

clean client in lib/rpc/svc auth gssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTH GSSAPI clie...

PT-2015-4193

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.11.5 and earlier MIT Kerberos 5 versions 1.12.x through 1.12.2 MIT Kerberos 5 versions 1.13.x before 1.13.1 Description The issue is related to the auth gssapi unwrap data function, which does not properly handle...