Description
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | krb5 | 1.4.4-6 | — |
| Debian 13 | krb5 | 1.4.4-6 | — |
| Debian 12 | krb5 | 1.4.4-6 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | krb5 | 1.19.2-2.2 | openSUSE-SU-2024:10899-1 |
Advisories 1
- openSUSE-SU-2024:10899-1 krb5-1.19.2-2.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 1017493 vdb-entry
- FEDORA-2007-034 vendor-advisory
- 31281 vdb-entry
- 24966 third-party-advisory
- VU#481564 third-party-advisory
- USN-408-1 vendor-advisory
- TA07-009B third-party-advisory
- 23696 third-party-advisory
- SUSE-SA:2007:004 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=305391
- 23706 third-party-advisory
- MDKSA-2007:008 vendor-advisory
- 23903 third-party-advisory
- 21970 vdb-entry
- 23667 third-party-advisory
- GLSA-200701-21 vendor-advisory
- http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt
- OpenPKG-SA-2007.006 vendor-advisory
- FEDORA-2007-033 vendor-advisory
- TA07-109A third-party-advisory
- https://issues.rpath.com/browse/RPL-925
- 23707 third-party-advisory
- ADV-2007-0111 vdb-entry
- 20070109 MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer mailing-list
- 23772 third-party-advisory
- 23701 third-party-advisory
- APPLE-SA-2007-04-19 vendor-advisory
- ADV-2007-1470 vdb-entry
- kerberos-rpc-code-execution(31422) vdb-entry