Known vulnerabilities in Kerberos 5

Vendor: MIT
Software: Kerberos 5
Software CPE: cpe:2.3:a:mit:krb5:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 49
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kerberos 5 Kerberos 5 is affected by 49 known vulnerabilities: 4 high, 33 medium, 12 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
- 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU95441 - Missing release of memory after effective lifetime
CVE-2024-26462
CWE-401 Medium
No
No
1.21.3 07.08.2024 SB2024040939
SB2024080724
SB2024080725
and 18 more
#VU93519 - Out-of-bounds read
CVE-2024-37371
CWE-125 Medium
No
No
1.21.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370
CWE-20 Medium
No
No
1.21.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461
CWE-401 Medium
No
No
1.21.3 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458
CWE-401 Medium
No
No
1.21.2 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054
CWE-824 Medium
No
No
1.20.2, 1.21.1 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79344 - Double Free
CVE-2023-39975
CWE-415 Medium
No
No
1.21.2 10.08.2023 SB2023081014
SB20230821173
SB2023110766
and 26 more
#VU56828 - NULL Pointer Dereference
CVE-2021-37750
CWE-476 Medium
No
No
1.19.3 22.09.2021 SB2021092223
SB2021092224
SB2021092811
and 26 more
#VU55287 - NULL Pointer Dereference
CVE-2021-36222
CWE-476 Medium
No
No
1.18.4, 1.19.2 25.07.2021 SB2021072501
SB2021072502
SB2021080601
and 24 more
#VU48444 - Uncontrolled Recursion
CVE-2020-28196
CWE-674 Medium
No
No
1.18.3 06.11.2020 SB2020111617
SB2020111618
SB2020112306
and 23 more
#VU33342 - NULL Pointer Dereference
CVE-2018-5710
CWE-476 Medium
No
No
1.16.1 04.08.2020 SB2018011616
SB2018082119
#VU12181 - Authentication Bypass Issues
CVE-2017-7562
CWE-592 Low
No
No
- 25.04.2018 SB2017082508
SB2018090704
SB2018041046
#VU11080 - NULL Pointer Dereference
CVE-2018-5729
CWE-476 Low
No
No
- 14.03.2018 SB2018011212
SB2018060602
SB2019012506
and 4 more
#VU11076 - Permissions, Privileges, and Access Controls
CVE-2018-5730
CWE-264 Low
No
No
- 14.03.2018 SB2018011212
SB2018060602
SB2019012506
and 5 more
#VU32240 - NULL Pointer Dereference
CVE-2016-3120
CWE-476 Medium
No
No
1.13.6 01.08.2016 SB2016080111
SB2016091423
SB2017020665
and 6 more
#VU32307 - Memory corruption
CVE-2015-8631
CWE-119 Medium
No
No
- 13.02.2016 SB2016021303
SB2016022214
SB2016042112
and 3 more
#VU32306 - NULL Pointer Dereference
CVE-2015-8630
CWE-476 Medium
No
No
- 13.02.2016 SB2016021302
SB2016022213
SB2016042112
and 3 more
#VU32305 - Memory corruption
CVE-2015-8629
CWE-119 Low
No
No
- 13.02.2016 SB2016021301
SB2016022212
SB2016042112
and 3 more
#VU33639 - Memory corruption
CVE-2015-2698
CWE-119 Medium
No
No
- 13.11.2015 SB2015111302
SB2015120204
SB2015110507
and 2 more


Showing elements 1 - 20 out of 49