VDB
DEBIAN-CVE-2024-26461
DEBIAN-CVE-2024-26461
PUBLISHED
CVSS 7.5 HIGH
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | krb5 | |
| Debian:11 | krb5 | 1.18.3-6+deb11u1, 1.18.3-6+deb11u2, 1.18.3-6+deb11u3 |
| Debian:12 | krb5 | 1.22.1-2, 1.20.1-2+deb12u3, 1.20.1-2+deb12u4 |
| Debian:14 | krb5 | 0, 1.21.3-5, 1.22.1-1 |
| Debian:13 | krb5 | 1.21.3-5, 1.22.1-1, 1.21.3-5 |
Timeline
- Feb 29, 2024 CVE Published
- Apr 28, 2026 CVE Updated