{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2018-5709: bounds-check key and name counts when loading a KDB dump\n- CVE-2020-28196: add recursion limit for ASN.1 indefinite lengths\n- CVE-2021-36222: fix KDC null deref on bad encrypted challenge\n- CVE-2022-42898: fix integer overflows in PAC parsing\n- CVE-2024-37370: verify the Extra Count field of CFX wrap tokens\n- CVE-2024-37371: reject GSS message tokens with invalid length fields\n- Bound dbentry->e_length when loading a KDB dump (upstream a9654198); the\n last unguarded 32-to-16-bit assignment in the function CVE-2018-5709\n bounds\n- Validate the PAC length in mspac_internalize() (upstream 63ae6a8d); the\n serialized length reaching krb5_pac_parse() was unchecked. Adds the internal\n helper k5_ser_unpack_len to libkrb5.exports, as upstream does; no public\n interface changes\n- Carry the t_invalid.c regression tests from upstream 55fbf435, split across\n the CVE-2024-37370 and CVE-2024-37371 patches to match the code split.\n test_cfx_altered_ec is the case that fails without the 37370 fix and\n test_cfx_large_ec the one that fails without the 37371 fix; the other two\n carried cases do not discriminate on 1.17 and are noted as such in the\n patch headers. Test-only: no shipped binary changes", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/el10/advisories/2026/clsa-2026_1789643585.json" } ], "tracking": { "current_release_date": "2026-09-17T11:14:14Z", "generator": { "date": "2026-09-17T11:14:14Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789643585", "initial_release_date": "2026-09-17T11:14:14Z", "revision_history": [ { "date": "2026-09-17T11:14:14Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-krb5: Fix of 6 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 10", "product": { "name": "Community Enterprise Operating System 10", "product_id": "CentOS-10", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-krb5-libs-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-libs-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-libs-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-libs@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-libkadm5-0:1.17-14.el10.x86_64", "product": { "name": "alt-libkadm5-0:1.17-14.el10.x86_64", "product_id": "alt-libkadm5-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-libkadm5@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-krb5-server-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-server-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-server-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-krb5-devel-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-devel-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-devel-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-devel@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-krb5-workstation-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-workstation-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-workstation-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-workstation@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-krb5-pkinit-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-pkinit-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-pkinit-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-pkinit@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "product": { "name": "alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "product_id": "alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-krb5-server-ldap@1.17-14.el10?arch=x86_64&os_name=centos&os_version=10" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-libs-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-libs-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libkadm5-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" }, "product_reference": "alt-libkadm5-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-server-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-devel-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-devel-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-workstation-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-workstation-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-pkinit-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-pkinit-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-krb5-server-ldap-0:1.17-14.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64" }, "product_reference": "alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "relates_to_product_reference": "CentOS-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-28196", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "description", "text": "MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2020-28196" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd", "url": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E", "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E", "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2020/11/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2020/11/msg00011.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202011-17", "url": "https://security.gentoo.org/glsa/202011-17" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20201202-0001/", "url": "https://security.netapp.com/advisory/ntap-20201202-0001/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210513-0002/", "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" }, { "category": "external", "summary": "https://www.debian.org/security/2020/dsa-4795", "url": "https://www.debian.org/security/2020/dsa-4795" }, { "category": "external", "summary": "https://www.oracle.com//security-alerts/cpujul2021.html", "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuApr2021.html", "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuapr2022.html", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" } ], "release_date": "2020-11-06T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-37370", "notes": [ { "category": "description", "text": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2024-37370" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef", "url": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/www/advisories/", "url": "https://web.mit.edu/kerberos/www/advisories/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241108-0007/", "url": "https://security.netapp.com/advisory/ntap-20241108-0007/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" } ], "release_date": "2024-06-28T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-42898", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2022-42898" }, { "category": "external", "summary": "https://bugzilla.samba.org/show_bug.cgi?id=15203", "url": "https://bugzilla.samba.org/show_bug.cgi?id=15203" }, { "category": "external", "summary": "https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c", "url": "https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583", "url": "https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202309-06", "url": "https://security.gentoo.org/glsa/202309-06" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202310-06", "url": "https://security.gentoo.org/glsa/202310-06" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230216-0008/", "url": "https://security.netapp.com/advisory/ntap-20230216-0008/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230223-0001/", "url": "https://security.netapp.com/advisory/ntap-20230223-0001/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/advisories/", "url": "https://web.mit.edu/kerberos/advisories/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/krb5-1.19/", "url": "https://web.mit.edu/kerberos/krb5-1.19/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt", "url": "https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt" }, { "category": "external", "summary": "https://www.samba.org/samba/security/CVE-2022-42898.html", "url": "https://www.samba.org/samba/security/CVE-2022-42898.html" } ], "release_date": "2022-12-25T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-37371", "notes": [ { "category": "description", "text": "In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2024-37371" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef", "url": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/www/advisories/", "url": "https://web.mit.edu/kerberos/www/advisories/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20241108-0009/", "url": "https://security.netapp.com/advisory/ntap-20241108-0009/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250124-0010/", "url": "https://security.netapp.com/advisory/ntap-20250124-0010/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" } ], "release_date": "2024-06-28T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2018-5709", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2018-5709" }, { "category": "external", "summary": "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow", "url": "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E", "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E" } ], "release_date": "2018-01-16T09:29:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-36222", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2021-36222" }, { "category": "external", "summary": "https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562", "url": "https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562" }, { "category": "external", "summary": "https://github.com/krb5/krb5/releases", "url": "https://github.com/krb5/krb5/releases" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20211022-0003/", "url": "https://security.netapp.com/advisory/ntap-20211022-0003/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20211104-0007/", "url": "https://security.netapp.com/advisory/ntap-20211104-0007/" }, { "category": "external", "summary": "https://web.mit.edu/kerberos/advisories/", "url": "https://web.mit.edu/kerberos/advisories/" }, { "category": "external", "summary": "https://www.debian.org/security/2021/dsa-4944", "url": "https://www.debian.org/security/2021/dsa-4944" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpuoct2021.html", "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" } ], "release_date": "2021-07-22T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T11:13:07.234025Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585", "product_ids": [ "CentOS-10:alt-krb5-devel-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-libs-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-pkinit-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-server-ldap-0:1.17-14.el10.x86_64", "CentOS-10:alt-krb5-workstation-0:1.17-14.el10.x86_64", "CentOS-10:alt-libkadm5-0:1.17-14.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1789643585" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }