Description
Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | krb5 | 1.6.dfsg.4~beta1-1 | — |
| Debian 13 | krb5 | 1.6.dfsg.4~beta1-1 | — |
| Debian 12 | krb5 | 1.6.dfsg.4~beta1-1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | krb5 | 1.19.2-2.2 | openSUSE-SU-2024:10899-1 |
Advisories 1
- openSUSE-SU-2024:10899-1 krb5-1.19.2-2.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 39784 third-party-advisory
- USN-940-1 vendor-advisory
- SUSE-SR:2008:002 vendor-advisory
- 26750 vdb-entry
- 20071208 Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972] mailing-list
- ADV-2010-1192 vdb-entry
- 44747 vdb-entry
- 20071208 MIT Kerberos 5: Multiple vulnerabilities mailing-list
- 39290 third-party-advisory
- USN-924-1 vendor-advisory
- 28636 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=199211
- https://issues.rpath.com/browse/RPL-2012