Kerberos
55 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Kerberos, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Kerberos CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 1 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 5 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 55 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical7
- High15
- Medium27
- Low6
Latest CVEs
The 15 most recently published vulnerabilities affecting Kerberos.
- BDU:2026-06234Уязвимость функции krb5int_utf8_normalize() компонента ucstr.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю получить доступ к конфиденциальным данным3.3
- BDU:2026-06233Уязвимость функции uccanoncompatdecomp() компонента ucdata.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании5.8
- BDU:2026-06235Уязвимость функции get_mech_set() компонента spnego_mech.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании3.3
- BDU:2026-06215Уязвимость функции krb5_chpw_message() сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании6.1
- BDU:2026-06232Уязвимость функции decode_krb5_flags() компонента asn1_k_encode.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании5.3
- CVE-2025-24528In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of...7.1
- CVE-2025-3576Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions5.9
- CVE-2024-37371In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.9.1
- CVE-2024-37370In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the appl...7.5
- CVE-2024-26462Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.5.5
- CVE-2024-26458Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.5.3
- CVE-2024-26461Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.7.5
- CVE-2023-36054lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs bec...6.5
- CVE-2022-39028telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application...7.5
- CVE-2021-37750The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server fi...6.5
Product grouping is registry-driven, with AI assist and human review. How it works