Description
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | krb5 | 1.6.dfsg.3~beta1-4 | — |
| Debian 13 | krb5 | 1.6.dfsg.3~beta1-4 | — |
| Debian 12 | krb5 | 1.6.dfsg.3~beta1-4 | — |
| Debian 4.0 | krb5 | 1.4.4-7etch5 | DSA-1524-1 |
| Debian 3.1 | krb5 | 1.3.6-2sarge6 | DSA-1524-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | krb5 +4 | 1.6.1-17.el5_1.1 | RHSA-2008:0164 |
| RHEL 4 | krb5 +4 | 1.3.4-54.el4_6.1 | RHSA-2008:0180 |
| RHEL 3 | krb5 +4 | 1.2.7-68 | RHSA-2008:0181 |
| RHEL 2 | krb5 +4 | 1.2.2-48 | RHSA-2008:0181 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4.5 EUS | krb5 +4 | 1.3.4-49.el4_5.1 | RHSA-2008:0182 |
Advisories 5
- RHSA-2008:0164 Red Hat Security Advisory: krb5 security and bugfix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0182 Red Hat Security Advisory: krb5 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0180 Red Hat Security Advisory: krb5 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0181 Red Hat Security Advisory: krb5 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1524-1 krb5 - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- ADV-2008-1744 vdb-entry
- 29457 third-party-advisory
- MDVSA-2008:069 vendor-advisory
- 29464 third-party-advisory
- GLSA-200803-31 vendor-advisory
- krb5-kdc-kerberos4-info-disclosure(41277) vdb-entry
- FEDORA-2008-2637 vendor-advisory
- MDVSA-2008:071 vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0112
- 1019627 vdb-entry
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
- 29451 third-party-advisory
- 29663 third-party-advisory
- FEDORA-2008-2647 vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112
- 29438 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html
- ADV-2008-0924 vdb-entry
- RHSA-2008:0164 vendor-advisory
- MDVSA-2008:070 vendor-advisory
- ADV-2008-0922 vdb-entry
- 29450 third-party-advisory
- 29435 third-party-advisory
- 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation mailing-list
- 29428 third-party-advisory
- 29420 third-party-advisory
- DSA-1524 vendor-advisory
- 30535 third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- RHSA-2008:0182 vendor-advisory
- oval:org.mitre.oval:def:8916 vdb-entry signature
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list
- RHSA-2008:0180 vendor-advisory
- SUSE-SA:2008:016 vendor-advisory
- 29516 third-party-advisory
- 29462 third-party-advisory
- 29424 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- RHSA-2008:0181 vendor-advisory
- 29423 third-party-advisory
- USN-587-1 vendor-advisory
- ADV-2008-1102 vdb-entry
- 28303 vdb-entry
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
- 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc mailing-list