Skip to content
fr Sign in
7.1 High

CVE-2025-24528 In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update…

Description

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

Affected products and versions

Product Affected versions Fixed in
Kerberos 5 1.7 1.7 → < 1.22 1.22

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Kerberos 5

The 3 CVEs of Kerberos 5 →
CVE-2026-40355 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls… 5.9 Medium CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an… 5.9 Medium
Track this CVE