CVE-2026-107884

In MIT krb5 release 1.15 and later, a client with kadmin administrative privileges can bypass the lockdownkeys attribute by using the password change protocol instead of the kadmin protocol. Mitigation Audit Kerberos access controls to ensure delegated password-change permissions are not assigned...

CVE-2026-111423

In MIT krb5 release 1.21 and later, server applications will erroneously treat the PAC within a ticket as verified when the server checksum is invalid. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2026-71199

In MIT krb5 release 1.14 and later since authentication indicator support was added, an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2026-107364

In all released versions of MIT krb5, an unauthenticated attacker can cause a KDC process to perform a large read overrun, likely causing the process to terminate. Mitigation Restrict network access to the Kerberos Key Distribution Center KDC ports 88 UDP/TCP to trusted client networks, or disabl...

OESA-2026-4493 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns...

OESA-2026-4492 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns...

OESA-2026-4491 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns...

Rocky Linux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

Linux Distros Unpatched Vulnerability : CVE-2026-107708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client...

CVE-2026-107708

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

PT-2026-108200

Name of the Vulnerable Software and Affected Versions MIT krb5 versions prior to 1.22.3 Description A NULL pointer dereference occurs in the KDC's get pac princ with realm function when it processes malformed names, returning success while leaving the client principal as NULL. A malicious or...

CVE-2026-107708: NULL Pointer Dereference

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

CVE-2026-11850

An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a prior bounds check. When bvlen is 0 or 1, the subtraction wraps to a large value which is then...

CVE-2026-11850: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a prior bounds check. When bvlen is 0 or 1, the subtraction wraps to a large value which is then...

EUVD-2019-11471

Malware in sbrugna...

EUVD-2018-17499

Malware in sbrugna...

EUVD-2022-41574

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-5729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2018-5730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by...

Huawei EulerOS: Security Advisory for telnet (EulerOS-SA-2024-1948)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...