Skip to content

Vulnerabilities of MIT krb5

Is your version affected?

CVE Summary Score Published
CVE-2026-107778 MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows… 7.1 High Oct 8, 2026
CVE-2026-107708 MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that… 6.9 Medium Oct 8, 2026
CVE-2019-14844 A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could… 7.5 High Sep 26, 2019
CVE-2017-7562 An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of… 6.5 Medium Jul 26, 2018

Other MIT products