Amazon Linux 2 : krb5, --advisory ALAS2-2026-3798 (ALAS-2026-3798)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3798 advisory. An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a...

Medium: krb5

Issue Overview: An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a prior bounds check. When bvlen is 0 or 1, the subtraction wraps to a large valu...

SUSE SLES12: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-doc / etc (SUSE-SU-2026:2849-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2849-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. Tenabl...

SUSE SLES15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2026:2847-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2847-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read...

Security update for krb5, krb5-mini

This update for krb5, krb5-mini fixes the following issues CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism bsc1263366. CVE-2026-40356: Denial of Service via integer...

openSUSE 16: krb5 / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (openSUSE-SU-2026:21238-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21238-1 advisory. This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. Tenable...

ROOT-OS-DEBIAN-12-CVE-2026-11850 CVE-2026-11850 in rootio-krb5 - Patched by Root

Root has patched CVE-2026-11850 in the rootio-krb5 package for Root:Debian:12. Multiple fixed versions available...

OPENSUSE-SU-2026:21238-1 Security update for krb5

This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131...

krb5-1.22.2-4.1 on GA media (moderate)

krb5-1.22.2-4.1 on GA media Announcement ID: openSUSE-SU-2026:11177-1 Rating: moderate Cross-References: CVE-2026-11850 CVSS scores: CVE-2026-11850 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: krb5: krb5-devel-1.22.2-8.hum1 aarch64, x8664 krb5-libs-1.22.2-8.hum1 aarch64, x8664 krb5-pkinit-1.22.2-8.hum1 aarch64, x8664 krb5-server-1.22.2-8.hum1 aarch64, x8664 krb5-server-ldap-1.22.2-8.hu...