27 matches found
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112320
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...
ALPINE-CVE-2026-112314
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
CVE-2026-112314
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
EUVD-2026-120238
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
CVE-2026-112314 Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
CVE-2026-112314
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
CVE-2026-112314
The MIT Kerberos 5 (krb5) library is vulnerable to a memory leak in the clnttcp_call() function located in lib/rpc/clnt_tcp.c. The root cause is that the software fails to free the RPC reply verifier between retries. This flaw allows remote attackers to cause a denial of service by injecting RPC ...
CVE-2026-112314
clnttcpcall in lib/rpc/clnttcp.c in MIT Kerberos 5 aka krb5 does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service memory leak in GSS-RPC client programs by injecting RPC replies with mismatched XIDs or by triggering authentication retries...
CVE-2026-112320
The MIT Kerberos 5 (krb5) GSS-RPC transport layer (version 1.4 and later) fails to release previous authentication contexts when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This flaw enables remote attackers to trigger a denial of ser...
CVE-2026-112320 Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...
EUVD-2026-120236
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...
CVE-2026-112320
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...
CVE-2026-112319 Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
EUVD-2026-120235
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 (krb5) fails to enforce size limits on XDR-decoded data . This flaw allows remote authenticated users to trigger unbounded memory allocations via crafted RPC requests, leading to a denial of service through memory exhaustion or excessive CPU consumption in kadm...
CVE-2026-112320
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...
CVE-2026-112319
The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...
CVE-2026-112320: Red Hat: The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication…
The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...