CVE-2025-24528
Fixed in a distro release EPSS <1%CVSS 7.1
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
Products: mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | krb5-devel | 1.18.2-31.el8_10 |
| AlmaLinux 8 | krb5-libs | 1.18.2-31.el8_10 |
| AlmaLinux 8 | krb5-pkinit | 1.18.2-31.el8_10 |
| AlmaLinux 8 | krb5-server | 1.18.2-31.el8_10 |
| AlmaLinux 8 | krb5-server-ldap | 1.18.2-31.el8_10 |
| AlmaLinux 8 | krb5-workstation | 1.18.2-31.el8_10 |
| AlmaLinux 8 | libkadm5 | 1.18.2-31.el8_10 |
| AlmaLinux 9 | krb5-devel | 1.21.1-6.el9 |
| AlmaLinux 9 | krb5-libs | 1.21.1-6.el9 |
| AlmaLinux 9 | krb5-pkinit | 1.21.1-6.el9 |
| AlmaLinux 9 | krb5-server | 1.21.1-6.el9 |
| AlmaLinux 9 | krb5-server-ldap | 1.21.1-6.el9 |
| AlmaLinux 9 | krb5-workstation | 1.21.1-6.el9 |
| AlmaLinux 9 | libkadm5 | 1.21.1-6.el9 |
| Amazon Linux 2 | krb5-devel | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | krb5-libs | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | krb5-pkinit | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | krb5-server | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | krb5-server-ldap | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | krb5-workstation | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2 | libkadm5 | 1.15.1-55.amzn2.2.9 |
| Amazon Linux 2023 | krb5-devel | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | krb5-libs | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | krb5-pkinit | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | krb5-server | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | krb5-server-ldap | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | krb5-workstation | 1.21.3-6.amzn2023.0.1 |
| Amazon Linux 2023 | libkadm5 | 1.21.3-6.amzn2023.0.1 |
| Debian 11 | krb5 | 1.18.3-6+deb11u6 |
| Debian 12 | krb5 | 1.20.1-2+deb12u3 |
| Debian 13 | krb5 | 1.21.3-5 |
| Debian 14 | krb5 | 1.21.3-5 |
| Red Hat Enterprise Linux 8 | krb5 | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-debugsource | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-devel | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-devel-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-libs | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-libs-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-pkinit | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-pkinit-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-server | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-server-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-server-ldap | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-server-ldap-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-workstation | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | krb5-workstation-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | libkadm5 | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 8 | libkadm5-debuginfo | 0:1.18.2-31.el8_10 |
| Red Hat Enterprise Linux 9 | krb5 | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-debugsource | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-devel | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-libs | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-libs-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-pkinit | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-pkinit-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-server | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-ldap | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-server-ldap-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-workstation | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | krb5-workstation-debuginfo | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | libkadm5 | 0:1.21.1-6.el9 |
| Red Hat Enterprise Linux 9 | libkadm5-debuginfo | 0:1.21.1-6.el9 |
| Red Hat rhel els 7 | krb5 | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-debuginfo | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-devel | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-libs | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-pkinit | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-server | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-server-ldap | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | krb5-workstation | 0:1.15.1-55.el7_9.4 |
| Red Hat rhel els 7 | libkadm5 | 0:1.15.1-55.el7_9.4 |
| Rocky Linux 8 | krb5 | 0:1.18.2-31.el8_10 |
| Rocky Linux 9 | krb5 | 0:1.21.1-6.el9 |
| SUSE Linux Enterprise Micro 5.1 | krb5 | 1.19.2-150300.22.1 |
| SUSE Linux Enterprise Micro 5.2 | krb5 | 1.19.2-150300.22.1 |
| SUSE Linux Enterprise Micro 5.3 | krb5 | 1.19.2-150400.3.15.1 |
| SUSE Linux Enterprise Micro 5.4 | krb5 | 1.19.2-150400.3.15.1 |
| SUSE Linux Enterprise Micro 5.5 | krb5 | 1.20.1-150500.3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | crypto-policies | 20230920.570ea89-150600.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | krb5 | 1.20.1-150600.11.8.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | krb5 | 1.20.1-150600.11.8.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | krb5 | 1.16.3-46.18.1 |
| SUSE Linux Micro 6.0 | krb5 | 1.20.1-6.1 |
| SUSE Linux Micro 6.1 | krb5 | 1.21.3-slfo.1.1_2.1 |
| Ubuntu 20.04 LTS | krb5 | 1.17-6ubuntu4.9 |
| Ubuntu 22.04 LTS | krb5 | 1.19.2-2ubuntu0.6 |
| Ubuntu 24.04 LTS | krb5 | 1.20.1-6ubuntu2.5 |
| Ubuntu 25.10 | krb5 | 1.21.3-4ubuntu2 |
| Ubuntu Pro 14.04 LTS | krb5 | no fix |
| Ubuntu Pro 16.04 LTS | krb5 | no fix |
| Ubuntu Pro 18.04 LTS | krb5 | no fix |
| openSUSE Leap 15.6 | crypto-policies | 20230920.570ea89-150600.3.3.1 |
| openSUSE Leap 15.6 | krb5 | 1.20.1-150600.11.8.1 |
| openSUSE Tumbleweed | krb5 | 1.21.3-2.1 |