{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2021-37750: check for a null server after decoding the FAST inner body\n in the KDC's TGS path. kdc_find_fast() can replace the request, and sprinc\n is reset from it; with no null check, get_local_tgt() then dereferenced\n sprinc->realm, so an authenticated client could crash krb5kdc with a FAST\n TGS request carrying no server field. Upstream d775c95a (1.18.5, 1.19.3)\n- CVE-2023-36054: ensure n_key_data matches the decoded key_data array count\n in _xdr_kadm5_principal_ent_rec(). The count was decoded unvalidated and\n xdr_array() was called with an unbounded limit and the decoded count never\n written back, so freeing the structure later could iterate the wrong number\n of elements and free uninitialized pointers, crashing kadmind. Reachable in\n both directions - a kadmind decoding a client request and a kadmin client\n decoding a malicious server's reply. Upstream ef08b09c (1.20.2, 1.21.1)\n- CVE-2026-107778: check for the end of the encrypted ticket-info list in\n make_cred_list(). The list is sized from krbcred->tickets but indexed into\n encpart->ticket_info with no bound of its own, so a KRB-CRED with more\n tickets than ticket_info entries dereferenced the NULL terminator. Reached\n through gss_accept_sec_context() when an acceptor processes forwarded\n credentials. Upstream 48afa9ab (after 1.22.2)\n- Reject a KrbCredInfo whose client or server principal name is absent, in\n make_cred_list(). Both names are optional in RFC 4120 and decode to NULL,\n and krb5_copy_principal() dereferences its input unconditionally, so a\n KRB-CRED omitting either crashed an acceptor on the same path. Upstream\n 5031b854a (ticket 9219) folds this into the CVE-2026-107778 guard; carried\n here as a separate patch. No CVE\n- CVE-2026-107708 is not applicable to 1.17: the vulnerable function\n get_pac_princ_with_realm() does not exist, nor does any PAC-parsing path in\n the KDC. It was introduced upstream by a441fbe32 (2022-01-12), three years\n after this release. 1.17's KDC identifies the S4U client from PA-FOR-USER\n via kdc_process_for_user(), and calls no krb5_pac_* function at all", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297", "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/el9/advisories/2026/clsa-2026_1792498297.json" } ], "tracking": { "current_release_date": "2026-10-20T12:12:36Z", "generator": { "date": "2026-10-20T12:12:36Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792498297", "initial_release_date": "2026-10-20T12:12:36Z", "revision_history": [ { "date": "2026-10-20T12:12:36Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-krb5: Fix of 3 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 9", "product": { "name": "Community Enterprise Operating System 9", "product_id": "CentOS-9", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:9:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-krb5-server-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-server-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-server-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-libs-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-libs-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-libs-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-libs@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-workstation-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-workstation-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-workstation-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-workstation@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server-ldap@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-libkadm5-0:1.17-15.el9.x86_64", "product": { "name": "alt-libkadm5-0:1.17-15.el9.x86_64", "product_id": "alt-libkadm5-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-libkadm5@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-pkinit-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-pkinit-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-pkinit-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-pkinit@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-devel-0:1.17-15.el9.x86_64", "product": { "name": "alt-krb5-devel-0:1.17-15.el9.x86_64", "product_id": "alt-krb5-devel-0:1.17-15.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-devel@1.17-15.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-libkadm5-0:1.17-14.el9.x86_64", "product": { "name": "alt-libkadm5-0:1.17-14.el9.x86_64", "product_id": "alt-libkadm5-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-libkadm5@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-pkinit-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-pkinit-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-pkinit-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-pkinit@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-server-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-server-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-server-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-libs-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-libs-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-libs-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-libs@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-workstation-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-workstation-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-workstation-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-workstation@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server-ldap@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } }, { "category": "product_version", "name": "alt-krb5-devel-0:1.17-14.el9.x86_64", "product": { "name": "alt-krb5-devel-0:1.17-14.el9.x86_64", "product_id": "alt-krb5-devel-0:1.17-14.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-devel@1.17-14.el9?arch=x86_64&os_name=centos&os_version=9" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-server-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-libs-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-libs-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-workstation-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-workstation-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-ldap-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libkadm5-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" }, "product_reference": "alt-libkadm5-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-pkinit-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-pkinit-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-devel-0:1.17-15.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64" }, "product_reference": "alt-krb5-devel-0:1.17-15.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libkadm5-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" }, "product_reference": "alt-libkadm5-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-pkinit-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-pkinit-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-server-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-libs-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-libs-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-workstation-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-workstation-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-ldap-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-devel-0:1.17-14.el9.x86_64 as a component of Community Enterprise Operating System 9", "product_id": "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64" }, "product_reference": "alt-krb5-devel-0:1.17-14.el9.x86_64", "relates_to_product_reference": "CentOS-9" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-36054", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "known_affected": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2023-36054" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd", "url": "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd" }, { "category": "external", "summary": "https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final", "url": "https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final" }, { "category": "external", "summary": "https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final", "url": "https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230908-0004/", "url": "https://security.netapp.com/advisory/ntap-20230908-0004/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/www/advisories/", "url": "https://web.mit.edu/kerberos/www/advisories/" } ], "release_date": "2023-08-07T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T12:11:39.003556Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297" }, { "category": "none_available", "date": "2023-08-07T19:15:00Z", "details": "Affected", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-107778", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "known_affected": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2026-107778" }, { "category": "external", "summary": "https://github.com/krb5/krb5", "url": "https://github.com/krb5/krb5" }, { "category": "external", "summary": "https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112", "url": "https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08", "url": "https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a", "url": "https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a" }, { "category": "external", "summary": "https://github.com/krb5/krb5/pull/1511", "url": "https://github.com/krb5/krb5/pull/1511" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred", "url": "https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred" } ], "release_date": "2026-10-08T21:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T12:11:39.003556Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297" }, { "category": "none_available", "date": "2026-10-08T21:17:00Z", "details": "Affected", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2021-37750", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "known_affected": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2021-37750" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49", "url": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49" }, { "category": "external", "summary": "https://github.com/krb5/krb5/releases", "url": "https://github.com/krb5/krb5/releases" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210923-0002/", "url": "https://security.netapp.com/advisory/ntap-20210923-0002/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/advisories/", "url": "https://web.mit.edu/kerberos/advisories/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2022.html", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "category": "external", "summary": "https://www.starwindsoftware.com/security/sw-20220817-0004/", "url": "https://www.starwindsoftware.com/security/sw-20220817-0004/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html" } ], "release_date": "2021-08-23T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T12:11:39.003556Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-15.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-15.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-15.el9.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792498297" }, { "category": "none_available", "date": "2021-08-23T05:15:00Z", "details": "Affected", "product_ids": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-9:alt-krb5-devel-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-libs-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-pkinit-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-server-ldap-0:1.17-14.el9.x86_64", "CentOS-9:alt-krb5-workstation-0:1.17-14.el9.x86_64", "CentOS-9:alt-libkadm5-0:1.17-14.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }