Known vulnerabilities in krb5 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
krb5 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:krb5_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
23
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.21.1-2.el9_4.5
1.20.1-9.el9_2.6
1.21.1-8.el9_6.2
1.21.3-10.el10_2
1.18.2-34.el8_10
1.21.1-6.el9
1.18.2-9.el8_4.3
1.17-19.el8_2.3
1.20.1-9.el9_2.3
1.21.1-8.el9_6
1.18.2-32.el8_10
1.18.2-31.el8_10
1.15.1-55.el7_9.4
1.21.1-2.el9_4.1
1.21.1-4.el9_5
1.21.1-3.el9
1.18.2-30.el8_10
1.18.2-16.el8_6.2
1.18.2-26.el8_8.3
1.18.2-9.el8_4.2
1.17-19.el8_2.2
1.15.1-55.el7_9.3
1.19.1-16.el9_0.2
1.20.1-9.el9_2.2
1.17-19.el8_2.1
1.18.2-16.el8_6.1
1.15.1-55.el7_9.2
1.18.2-9.el8_4.1
1.6.1-70.el5_9.2
1.10.3-10.el6_4.3
1.10.3-10.el6_4.2
1.10.3-10.el6_4.1
1.9-33.el6_3.2
1.6.1-55.el5_6.3
1.9-22.el6_2.1
1.9-9.el6_1.2
1.8.2-3.el6_0.7
1.8.2-3.el6_0.6
1.8.2-3.el6_0.4
1.6.1-55.el5_6.1
1.3.4-62.el4_8.3
1.6.1-36.el5_5.6
1.8.2-3.el6_0.3
1.8.2-3.el6_0.1
1.3.4-62.el4_8.2
1.6.1-36.el5_5.4
1.6.1-36.el5_5.2
1.3.4-60.el4_7.3
1.3.4-62.el4_8.1
1.6.1-36.el5_4.1
1.3.4-60.el4_7.2
1.6.1-31.el5_3.3
2.2.14-1.el5_2.1
1.3.4-49.el4_5.1
1.3.4-54.el4_6.1
1.6.1-17.el5_1.1
1.18.2-27.el8_10
1.18.2-16.el8_6
1.21.1-1.el9
1.20.1-8.el9
1.19.1-16.el9_0
1.10.3-66.el6_10
1.18.2-15.el8_6
1.19.1-24.el9_1
1.18.2-22.el8_7
1.18.2-9.el8_4
1.15.1-55.el7_9
1.17-10.el8_1
1.17-19.el8_2
1.15.1-51.el7_9
1.18.2-8.3.el8_4
1.18.2-8.el8
1.15.1-37.el7_7.2
1.15.1-34.el7
1.15.1-18.el7
1.3.4-65.el4
1.6.1-63.el5_7
1.6.1-70.el5
1.6.1-78.el5
1.6.1-80.el5_11
1.12.2-14.el7
1.13.2-10.el7
1.10.3-42z1.el6_7
1.13.2-12.el7_2
1.14.1-26.el7
1.10.3-65.el6
1.10.3-57.el6
1.10.3-42.el6
1.10.3-37.el6_6
1.10.3-33.el6
1.10.3-15.el6_5
1.10.3-10.el6_4
1.10.3-10.el6
1.9-33.el6_3
1.9-33.el6
1.9-22.el6_2
1.9-22.el6
1.9-9.el6_1
1.9-9.el6
1.8.2-3.el6_0
1.8.2-3.el6
Vulnerabilities (23)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112440 - Use of a Broken or Risky Cryptographic Algorithm CVE-2025-3576 |
CWE-327 | Medium | 1.17-19.el8_2.3, 1.18.2-9.el8_4.3, 1.18.2-32.el8_10, 1.20.1-9.el9_2.3, 1.21.1-8.el9_6 | 07.07.2025 |
SB2025070764 SB2025070769 SB2025070770 and 29 more |
||
| #VU103504 - Out-of-bounds write CVE-2025-24528 |
CWE-787 | Medium | 1.15.1-55.el7_9.4, 1.18.2-31.el8_10 | 03.02.2025 |
SB2025020331 SB2025020352 SB2025020412 and 49 more |
||
| #VU95441 - Missing release of memory after effective lifetime CVE-2024-26462 |
CWE-401 | Medium | 1.21.1-3.el9 | 07.08.2024 |
SB2024040939 SB2024080724 SB2024080725 and 18 more |
||
| #VU94063 - Use of a Broken or Risky Cryptographic Algorithm CVE-2024-3596 |
CWE-327 | Medium | 1.15.1-55.el7_9.3, 1.17-19.el8_2.2, 1.18.2-9.el8_4.2, 1.18.2-16.el8_6.2, 1.18.2-26.el8_8.3, 1.18.2-30.el8_10, 1.19.1-16.el9_0.2, 1.20.1-9.el9_2.2, 1.21.1-2.el9_4.1, 1.21.1-4.el9_5 | 10.07.2024 |
SB2024071018 SB2024071019 SB2024071020 and 114 more |
||
| #VU93519 - Out-of-bounds read CVE-2024-37371 |
CWE-125 | Medium | 1.15.1-55.el7_9.2, 1.17-19.el8_2.1, 1.18.2-9.el8_4.1, 1.18.2-16.el8_6.1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 114 more |
||
| #VU93518 - Improper input validation CVE-2024-37370 |
CWE-20 | Medium | 1.15.1-55.el7_9.2, 1.17-19.el8_2.1, 1.18.2-9.el8_4.1, 1.18.2-16.el8_6.1 | 01.07.2024 |
SB2024070148 SB2024070491 SB2024070496 and 96 more |
||
| #VU88226 - Missing release of memory after effective lifetime CVE-2024-26461 |
CWE-401 | Medium | 1.18.2-27.el8_10, 1.21.1-3.el9 | 09.04.2024 |
SB2024040939 SB2024040943 SB20240611102 and 46 more |
||
| #VU88225 - Missing release of memory after effective lifetime CVE-2024-26458 |
CWE-401 | Medium | 1.18.2-27.el8_10, 1.21.1-3.el9 | 09.04.2024 |
SB2024040938 SB2024040943 SB20240611102 and 47 more |
||
| #VU85268 - Cross-Site Request Forgery (CSRF) CVE-2023-5455 |
CWE-352 | Medium | 1.18.2-16.el8_6 | 10.01.2024 |
SB2024011032 SB2024011039 SB2024011040 and 17 more |
||
| #VU79586 - Access of Uninitialized Pointer CVE-2023-36054 |
CWE-824 | Medium | 1.21.1-1.el9 | 16.08.2023 |
SB2023081621 SB2023081623 SB2023081624 and 51 more |
||
| #VU79344 - Double Free CVE-2023-39975 |
CWE-415 | Medium | 1.21.1-1.el9 | 10.08.2023 |
SB2023081014 SB20230821173 SB2023110766 and 26 more |
||
| #VU69337 - Integer overflow CVE-2022-42898 |
CWE-190 | Medium | 1.10.3-66.el6_10, 1.15.1-55.el7_9, 1.17-10.el8_1, 1.17-19.el8_2, 1.18.2-9.el8_4, 1.18.2-15.el8_6, 1.18.2-22.el8_7, 1.19.1-16.el9_0, 1.19.1-24.el9_1 | 15.11.2022 |
SB2022111530 SB2022111610 SB2022111621 and 123 more |
||
| #VU69104 - Permissions, Privileges, and Access Controls CVE-2022-37967 |
CWE-264 | Low | 1.18.2-16.el8_6, 1.20.1-8.el9 | 08.11.2022 |
SB2022110827 SB2022121537 SB2022121801 and 13 more |
||
| #VU56828 - NULL Pointer Dereference CVE-2021-37750 |
CWE-476 | Medium | 1.15.1-51.el7_9, 1.18.2-8.3.el8_4 | 22.09.2021 |
SB2021092223 SB2021092224 SB2021092811 and 26 more |
||
| #VU55287 - NULL Pointer Dereference CVE-2021-36222 |
CWE-476 | Medium | 1.18.2-8.3.el8_4 | 25.07.2021 |
SB2021072501 SB2021072502 SB2021080601 and 24 more |
||
| #VU48269 - Security Features CVE-2020-17049 |
CWE-254 | Low | 1.18.2-16.el8_6, 1.20.1-8.el9 | 10.11.2020 |
SB2020111029 SB2021111015 SB2022121006 and 18 more |
||
| #VU48444 - Uncontrolled Recursion CVE-2020-28196 |
CWE-674 | Medium | 1.18.2-8.el8 | 06.11.2020 |
SB2020111617 SB2020111618 SB2020112306 and 23 more |
||
| #VU17350 - Reachable Assertion CVE-2018-20217 |
CWE-617 | Low | 1.15.1-37.el7_7.2 | 01.02.2019 |
SB2019012517 SB2019011813 SB2019090310 and 9 more |
||
| #VU32240 - NULL Pointer Dereference CVE-2016-3120 |
CWE-476 | Medium | 1.14.1-26.el7 | 01.08.2016 |
SB2016080111 SB2016091423 SB2017020665 and 6 more |
||
| #VU33628 - Improper input validation CVE-2016-3119 |
CWE-20 | Medium | 1.14.1-26.el7 | 26.03.2016 |
SB2016050518 SB2017020665 SB2016031810 and 3 more |
Showing elements 1 - 20 out of 23