Skip to content
OpenAdvisories

Vendor

MIT

7 known vulnerabilities.

Products

krb5 4 Kerberos 5 3 Kerberos 0 Kerberos < 1.17.2 0 Kerberos < 1.18.3 0 Kerberos < 5-1.16.3 0 Kerberos < 5-1.15.5 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-107778

    MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()

    MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more ti…

    MIT krb5 krb5 krb5 Debian Ubuntu Alpine
  • Medium 4.9
    CVE-2026-107708

    MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC

    MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S…

    MIT krb5 krb5 krb5 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2026-40355

    In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_…

    MIT Kerberos 5 krb5 krb5 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2026-40356

    In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an applic…

    MIT Kerberos 5 krb5 krb5 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2017-7562

    An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of cl…

    MIT krb5