RLSA-2026:99624 Important: krb5 security, bug fix, and enhancement update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

krb5 security, bug fix, and enhancement update

An update is available for krb5. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kerberos is a network authentication system, which can improve the security of...

RLSA-2026:99715 Important: krb5 security, bug fix, and enhancement update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

krb5 security, bug fix, and enhancement update

An update is available for krb5. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kerberos is a network authentication system, which can improve the security of...

RockyLinux 10 : krb5 (RLSA-2026:99624)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:99624 advisory. krb5: MIT krb5 kadmind unauthenticated memory exhaustion via failed AUTHGSSAPIINIT requests CVE-2026-112323 krb5: MIT krb5 kadmind unauthenticated CPU...

RockyLinux 9 : krb5 (RLSA-2026:99715)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:99715 advisory. krb5: MIT krb5 kadmind unauthenticated memory exhaustion via failed AUTHGSSAPIINIT requests CVE-2026-112323 krb5: MIT krb5 kadmind unauthenticated CPU D...

krb5: MIT krb5 kadmind unauthenticated CPU DoS via AUTH_GSSAPI client states cleanup

cleanclient in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service CPU consumption in kadmind by accumulating a large number of AUTHGSSAPI client...

krb5: MIT krb5 kadmind unauthenticated memory leak DoS via GSS-RPC auth flavor switching

The GSS-RPC transport layer in MIT Kerberos 5 aka krb5 1.4 and later does not release the previous authentication context when a client switches from an RPCSECGSS or AUTHGSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service memory...

krb5: MIT krb5 kadmind authenticated memory exhaustion DoS via unbounded RPC XDR allocation

The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...

krb5: MIT krb5 kadmind unauthenticated memory leak DoS in RPCSEC_GSS buffer decode failure

The RPCSECGSS authentication routines in lib/rpc/authgssprot.c in MIT Kerberos 5 aka krb5 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service memory leak in kadmind via crafted RPCSECGSS messages...

krb5: MIT krb5 kadmind authenticated memory leak DoS in xdr_krb5_tl_data() decode failure

xdrkrb5tldata in lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service memory leak in kadmind via crafted RPC requests that trigger a decode failure...

krb5: kadmind: request alteration and protected information disclosure

In MIT krb5 release 1.4 and later, an active network attacker can alter the arguments sent by a legitimate client to RPC services protected by RPCSECGSS, or cause return values to be sent in plain text...

Important: Red Hat Security Advisory: krb5 security, bug fix, and enhancement update

An update for krb5 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

krb5: MIT krb5 kadmind authenticated DoS exploiting dereference of null policy name pointers

The policy RPC stubs in kadmin/server/serverstubs.c in MIT Kerberos 5 aka krb5 1.5.3 and later do not reject a NULL policy name decoded by xdrnullstring, which allows remote authenticated users to cause a denial of service kadmind crash via NULL pointer dereference by sending a policy request wit...

krb5: MIT krb5 kadmind unauthenticated memory leak DoS via AUTH_GSSAPI_INIT error paths

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service memory exhaustion in kadmind via crafted AUTHGSSAPIINIT requests that trigger authentication failures...

krb5: MIT krb5 kadmind unauthenticated memory exhaustion via failed AUTH_GSSAPI_INIT requests

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 1.5.2 and later allows remote attackers to cause a denial of service memory exhaustion in kadmind by sending repeated failed AUTHGSSAPIINIT requests. Each failed request allocates client state that is only freed after a...

krb5: MIT krb5 kadmind unauthenticated memory leak DoS via AUTH_GSSAPI_INIT error paths

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service memory exhaustion in kadmind via crafted AUTHGSSAPIINIT requests that trigger authentication failures...

krb5: MIT krb5 kadmind authenticated memory leak DoS in xdr_krb5_tl_data() decode failure

xdrkrb5tldata in lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service memory leak in kadmind via crafted RPC requests that trigger a decode failure...

krb5: MIT krb5 kadmind unauthenticated memory exhaustion via failed AUTH_GSSAPI_INIT requests

The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 aka krb5 1.5.2 and later allows remote attackers to cause a denial of service memory exhaustion in kadmind by sending repeated failed AUTHGSSAPIINIT requests. Each failed request allocates client state that is only freed after a...

krb5: MIT krb5 kadmind authenticated memory exhaustion DoS via unbounded RPC XDR allocation

The GSS-RPC layer in MIT Kerberos 5 aka krb5 does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service memory exhaustion or excessive CPU consumption in kadmind via crafted RPC requests that trigger unbounded memory allocations during X...