Skip to content
OpenAdvisories

Product · MIT

krb5

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-107778

    MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()

    MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more ti…

    MIT krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine
  • Medium 4.9
    CVE-2026-107708

    MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC

    MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S…

    MIT krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2017-7562

    An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of cl…

    MIT krb5