Skip to content
OpenAdvisories
High DLA-4477-1 1 CVE

munge - security update

Published Feb 10, 2026 · Updated Feb 10, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 munge 0.5.14-4+deb11u1

Vulnerabilities 1

  • High 7.7
    CVE-2026-25506

    MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

    MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory.…

    dun munge munge munge Debian Ubuntu Azure Linux