CVE-2026-112323 Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 1.5.2 and later allows remote attackers to cause a denial of service memory exhaustion in kadmind by sending repeated failed AUTHGSSAPIINIT requests. Each failed request allocates client state that is only freed after a...

CVE-2026-112323

The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c within MIT Kerberos 5 (krb5) version 1.5.2 and later is vulnerable to a denial of service via memory exhaustion in kadmind . An attacker can trigger this by sending repeated failed AUTH_GSSAPI_INIT requests, which allocate client state that rem...

CVE-2026-112323: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote…

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 1.5.2 and later allows remote attackers to cause a denial of service memory exhaustion in kadmind by sending repeated failed AUTHGSSAPIINIT requests. Each failed request allocates client state that is only freed after a...