CVE-2024-26462
Fixed in a distro release EPSS <1%CVSS 5.5
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
Products: mit kerberos_5, netapp active_iq_unified_manager, netapp cloud_volumes_ontap_mediator, management_services_for_element_software_and_netapp_hci, netapp ontap_select_deploy_administration_utility, netapp h610c_firmware, netapp h610s_firmware, netapp h615c_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | krb5-devel | 1.21.1-3.el9 |
| AlmaLinux 9 | krb5-libs | 1.21.1-3.el9 |
| AlmaLinux 9 | krb5-pkinit | 1.21.1-3.el9 |
| AlmaLinux 9 | krb5-server | 1.21.1-3.el9 |
| AlmaLinux 9 | krb5-server-ldap | 1.21.1-3.el9 |
| AlmaLinux 9 | krb5-workstation | 1.21.1-3.el9 |
| AlmaLinux 9 | libkadm5 | 1.21.1-3.el9 |
| Amazon Linux 2023 | krb5-devel | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | krb5-libs | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | krb5-pkinit | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | krb5-server | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | krb5-server-ldap | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | krb5-workstation | 1.21-3.amzn2023.0.4 |
| Amazon Linux 2023 | libkadm5 | 1.21-3.amzn2023.0.4 |
| Debian 12 | krb5 | 1.20.1-2+deb12u3 |
| Debian 13 | krb5 | 1.21.3-1 |
| Debian 14 | krb5 | 1.21.3-1 |
| Red Hat Enterprise Linux 9 | krb5 | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-debugsource | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-devel | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-libs | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-libs-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-pkinit | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-pkinit-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-server | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-ldap | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-ldap-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-workstation | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | krb5-workstation-debuginfo | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | libkadm5 | 0:1.21.1-3.el9 |
| Red Hat Enterprise Linux 9 | libkadm5-debuginfo | 0:1.21.1-3.el9 |
| SUSE Linux Enterprise Micro 5.5 | krb5 | 1.20.1-150500.3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | krb5 | 1.20.1-150500.3.6.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | krb5 | 1.20.1-150500.3.6.1 |
| SUSE Linux Micro 6.0 | krb5 | 1.20.1-5.1 |
| Ubuntu 20.04 LTS | krb5 | 1.17-6ubuntu4.9 |
| Ubuntu 22.04 LTS | krb5 | 1.19.2-2ubuntu0.6 |
| Ubuntu 24.04 LTS | krb5 | 1.20.1-6ubuntu2.5 |
| openSUSE Leap 15.5 | krb5 | 1.20.1-150500.3.6.1 |
| openSUSE Tumbleweed | krb5 | 1.21.2-3.1 |