Description
Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | libapache-mod-auth-kerb | 4.996-5.0-rc6-1sarge1 | DSA-1247-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | mod_auth_kerb | 5.0-1.3 | RHSA-2006:0746 |
Advisories 2
- RHSA-2006:0746 Red Hat Security Advisory: mod_auth_kerb security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1247-1 libapache-mod-auth-kerb Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=136650
- 23251 third-party-advisory
- 23681 third-party-advisory
- DSA-1247 vendor-advisory
- 21214 vdb-entry
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206736
- 23023 third-party-advisory
- 23820 third-party-advisory
- RHSA-2006:0746 vendor-advisory
- apache-modauthkerb-offbyone-bo(30456) vdb-entry
- MDKSA-2006:218 vendor-advisory
- 1017348 vdb-entry
- ADV-2006-4633 vdb-entry
- GLSA-200701-14 vendor-advisory
- oval:org.mitre.oval:def:10051 vdb-entry signature