Skip to content
OpenAdvisories
Unscored CVE-2021-36222 EUVD-2021-22842GHSA-7gwg-3h62-pwf5

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 …

Published Jul 22, 2021 · Updated Oct 14, 2026 · Assigned by mitre

Package: krb5 Package: krb5 Package: krb5 Package: krb5 Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 krb5 1.18.3-6 —
Debian 13 krb5 1.18.3-6 —
Debian 12 krb5 1.18.3-6 —
Debian 10 krb5 1.17-3+deb10u2 DSA-4944-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS krb5 1.17-6ubuntu4.3 USN-5959-1
Ubuntu 18.04 LTS krb5 1.16-2ubuntu0.4 USN-5959-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 krb5 +7 1.18.2-8.3.el8_4 RHSA-2021:3576

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 krb5 1.18.2-8.3.el8_4 RLSA-2021:3576

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 grafana 8.5.13-150200.3.29.5 SUSE-SU-2022:4428-1
SLES 15 SP3 apparmor 2.13.6-150300.3.11.2 SUSE-SU-2022:0283-1
SLES 15 SP3 krb5 1.16.3-3.21.1 SUSE-SU-2022:0283-1, SUSE-SU-2021:2800-1
SLES 15 SP3 ldb 2.4.1-150300.3.10.1 SUSE-SU-2022:0283-1
SLES 15 SP3 libapparmor 2.13.6-150300.3.11.1 SUSE-SU-2022:0283-1
SLES 15 SP3 samba 4.15.4+git.324.8332acf1a63-150300.3.25.3 SUSE-SU-2022:0283-1
SLES 15 SP3 sssd 1.16.1-150300.23.17.3 SUSE-SU-2022:0283-1
SLES 15 SP3 talloc 2.3.3-150300.3.3.2 SUSE-SU-2022:0283-1
SLES 15 SP3 talloc-man 2.3.3-150300.3.3.1 SUSE-SU-2022:0283-1
SLES 15 SP3 tdb 1.4.4-150300.3.3.2 SUSE-SU-2022:0283-1
SLES 15 SP3 tevent 0.11.0-150300.3.3.2 SUSE-SU-2022:0283-1
SLES 15 SP3 tevent-man 0.11.0-150300.3.3.1 SUSE-SU-2022:0283-1
SLES 15 SP2 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SLES 15 SP1 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SLES 12 SP5 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
Show 26 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SLES 12 SP3 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SLES 2 samba 4.15.4+git.324.8332acf1a63-150300.3.25.3 SUSE-SU-2022:0283-1
SLES for SAP 15 SP1 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SLES for SAP 12 SP5 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SLES for SAP 12 SP4 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SLES for SAP 12 SP3 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SLE Micro 5.1 apparmor 2.13.6-150300.3.11.2 SUSE-SU-2022:0283-1
SLE Micro 5.1 krb5 1.19.2-150300.8.3.2 SUSE-SU-2022:0283-1
SLE Micro 5.1 ldb 2.4.1-150300.3.10.1 SUSE-SU-2022:0283-1
SLE Micro 5.1 libapparmor 2.13.6-150300.3.11.1 SUSE-SU-2022:0283-1
SLE Micro 5.1 sssd 1.16.1-150300.23.17.3 SUSE-SU-2022:0283-1
SLE Micro 5.1 talloc 2.3.3-150300.3.3.2 SUSE-SU-2022:0283-1
SLE Micro 5.1 tdb 1.4.4-150300.3.3.2 SUSE-SU-2022:0283-1
SLE Micro 5.1 tevent 0.11.0-150300.3.3.2 SUSE-SU-2022:0283-1
SLE Micro 5.0 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SLE HPC 15 SP1 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SUSE OpenStack Cloud Crowbar 9 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SUSE OpenStack Cloud Crowbar 8 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SUSE OpenStack Cloud 9 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SUSE OpenStack Cloud 8 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SUSE Manager Server Module 4.2 prometheus-postgres_exporter 0.10.0-150000.1.3.1 SUSE-SU-2022:1396-1
SUSE Manager Server 4.0 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SUSE Manager Retail Branch Server 4.0 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SUSE Manager Proxy Module 4.3 golang-github-boynux-squid_exporter 1.6-150000.1.9.1 SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.3 prometheus-blackbox_exporter 0.19.0-150000.1.14.3 SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.2 golang-github-boynux-squid_exporter 1.6-150000.1.9.1 SUSE-SU-2022:4437-1
SUSE Manager Proxy Module 4.2 prometheus-blackbox_exporter 0.19.0-150000.1.14.3 SUSE-SU-2022:4437-1
SUSE Manager Proxy 4.0 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1
SUSE Manager Client Tools for SLE Micro 5 dracut-saltboot 0.1.1665997480.587fa10-150000.1.41.1 SUSE-SU-2022:4437-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.19.0-150000.1.14.3 SUSE-SU-2022:4437-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-proxy-systemd-services 4.3.7-150000.1.9.3 SUSE-SU-2022:4437-1
SUSE Manager Client Tools Beta for SLE Micro 5 dracut-saltboot 0.1.1681904360.84ef141-159000.3.30.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 golang-github-QubitProducts-exporter_exporter 0.4.0-159000.4.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 prometheus-blackbox_exporter 0.24.0-159000.3.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 uyuni-proxy-systemd-services 5.0.1-159000.3.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 ansible 2.9.27-159000.3.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 dracut-saltboot 0.1.1665997480.587fa10-150000.1.41.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15 golang-github-QubitProducts-exporter_exporter 0.4.0-159000.4.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 golang-github-boynux-squid_exporter 1.6-150000.1.9.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15 golang-github-lusitaniae-apache_exporter 1.0.0-159000.4.12.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.45.0-159000.6.33.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 grafana 8.3.5-150000.1.30.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 mgr-cfg 4.2.8-150000.1.24.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 mgr-osad 4.2.8-150000.1.36.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 mgr-push 4.2.5-150000.1.18.2 SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 mgr-virtualization 4.2.4-150000.1.26.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.19.0-150000.1.14.3 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 15 prometheus-postgres_exporter 0.10.0-150000.1.3.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 python-hwdata 2.3.5-159000.5.13.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 python-pyvmomi 6.7.3-159000.3.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 rhnlib 4.2.6-150000.3.34.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 spacecmd 4.2.16-150000.3.77.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 spacewalk-client-tools 4.2.18-150000.3.59.1 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 spacewalk-koan 4.2.6-150000.3.27.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 spacewalk-oscap 4.2.4-150000.3.18.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 supportutils-plugin-salt 1.2.2-159000.5.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client 5.0.1-159000.6.15.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 suseRegisterInfo 4.2.6-150000.3.21.1 SUSE-SU-2022:1396-1
SUSE Manager Client Tools 15 uyuni-common-libs 5.0.1-159000.3.33.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 uyuni-proxy-systemd-services 4.3.7-150000.1.9.3 SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1
SUSE Manager Client Tools 12 golang-github-QubitProducts-exporter_exporter 0.4.0-1.6.1 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 golang-github-boynux-squid_exporter 1.6-1.9.1 SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1
SUSE Manager Client Tools 12 golang-github-lusitaniae-apache_exporter 1.0.0-4.12.4 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 golang-github-prometheus-alertmanager 0.23.0-1.12.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.45.0-4.33.3 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 golang-github-prometheus-promu 0.14.0-4.12.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 grafana 8.3.5-1.30.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 kiwi-desc-saltboot 0.1.1687520761.cefb248-4.15.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 mgr-cfg 4.3.6-1.27.4 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 mgr-custom-info 4.3.3-1.18.1 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 mgr-daemon 4.3.4-1.32.3 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 mgr-osad 4.3.6-1.39.4 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 mgr-push 4.3.4-1.21.4 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 mgr-virtualization 4.3.5-1.29.3 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 prometheus-blackbox_exporter 0.19.0-1.8.2 SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 prometheus-postgres_exporter 0.10.0-1.8.2 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 python-hwdata 2.3.5-12.9.1 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 rhnlib 4.3.4-21.43.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 spacecmd 4.3.11-38.103.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 spacewalk-client-tools 4.3.9-52.71.3 SUSE-SU-2022:4439-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 spacewalk-koan 4.3.5-24.33.3 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 spacewalk-oscap 4.3.5-19.27.1 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 spacewalk-remote-utils 4.3.3-24.24.3 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 supportutils-plugin-salt 1.2.0-6.16.1 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client 4.3.2-6.24.1 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 suseRegisterInfo 4.3.3-25.27.3 SUSE-SU-2022:2134-1
SUSE Manager Client Tools 12 system-user-grafana +1 1.0.0-3.7.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 uyuni-common-libs 4.3.4-1.21.3 SUSE-SU-2024:0191-1, SUSE-SU-2022:2134-1
SUSE HPE Helion OpenStack 8 golang-github-prometheus-node_exporter 1.3.0-1.15.3 SUSE-SU-2022:2134-1
SUSE Enterprise Storage 6 grafana 8.5.13-150100.3.12.1 SUSE-SU-2022:3676-1
SUSE Enterprise Storage 6 krb5 1.16.3-3.21.1 SUSE-SU-2021:2800-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed grafana 8.3.4-1.1 openSUSE-SU-2024:11816-1
openSUSE Tumbleweed krb5 1.19.2-2.2 openSUSE-SU-2024:10899-1
openSUSE Leap 15.4 dracut-saltboot 0.1.1665997480.587fa10-150000.1.41.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.4 golang-github-boynux-squid_exporter 1.6-150000.1.9.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.4 golang-github-prometheus-promu 0.13.0-150000.3.9.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.4 grafana 8.3.5-150200.3.21.1 SUSE-SU-2022:4428-1, SUSE-FU-2022:1419-1
openSUSE Leap 15.4 prometheus-blackbox_exporter 0.19.0-150000.1.14.3 SUSE-SU-2022:4437-1
openSUSE Leap 15.4 spacecmd 4.3.16-150000.3.89.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.4 wire 0.5.0-150000.1.9.3 SUSE-SU-2022:4437-1
openSUSE Leap 15.3 apparmor 2.13.6-150300.3.11.2 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 dracut-saltboot 0.1.1665997480.587fa10-150000.1.41.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.3 golang-github-boynux-squid_exporter 1.6-150000.1.9.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.3 golang-github-prometheus-promu 0.13.0-150000.3.9.1 SUSE-SU-2022:4437-1
openSUSE Leap 15.3 grafana 8.3.5-150200.3.21.1 SUSE-SU-2022:4428-1, SUSE-FU-2022:1419-1
openSUSE Leap 15.3 krb5 +1 1.16.3-3.21.1 openSUSE-SU-2022:0283-1, openSUSE-SU-2021:2800-1
openSUSE Leap 15.3 ldb 2.4.1-150300.3.10.1 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 libapparmor 2.13.6-150300.3.11.1 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 prometheus-postgres_exporter 0.10.0-150000.1.3.1 SUSE-SU-2022:1396-1
openSUSE Leap 15.3 rhnlib 4.2.6-150000.3.34.1 SUSE-SU-2022:1396-1
openSUSE Leap 15.3 samba 4.15.4+git.324.8332acf1a63-150300.3.25.3 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 spacecmd 4.2.16-150000.3.77.1 SUSE-SU-2022:4437-1, SUSE-SU-2022:1396-1
openSUSE Leap 15.3 sssd 1.16.1-150300.23.17.3 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 talloc 2.3.3-150300.3.3.2 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 talloc-man 2.3.3-150300.3.3.1 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 tdb 1.4.4-150300.3.3.2 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 tevent 0.11.0-150300.3.3.2 openSUSE-SU-2022:0283-1
openSUSE Leap 15.3 tevent-man 0.11.0-150300.3.3.1 openSUSE-SU-2022:0283-1
openSUSE Leap 15.2 krb5 +1 1.16.3-lp152.5.19.1 openSUSE-SU-2021:1182-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 krb5 1.18.4-r0 —
Alpine v3.23 krb5 1.18.4-r0 —
Alpine v3.22 krb5 1.18.4-r0 —
Alpine v3.21 krb5 1.18.4-r0 —
Alpine v3.20 krb5 1.18.4-r0 —
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 krb5 1.18.4-r0 —
Alpine v3.18 krb5 1.18.4-r0 —
Alpine v3.17 krb5 1.18.4-r0 —
Alpine v3.16 krb5 1.18.4-r0 —
Alpine v3.15 krb5 1.18.4-r0 —
Alpine v3.14 krb5 1.18.4-r0 —
Alpine v3.13 krb5 1.18.4-r0 —
Alpine v3.12 krb5 1.18.4-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) krb5 1.19.2-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 libkadm5 +6 1.18.2-8.3.el8_4 ELSA-2021-3576

Advisories 24

References