VulnerableCode Package Details - pkg:alpm/archlinux/krb5@1.15.1-1

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:alpm/archlinux/krb5@1.15.1-1

Essentials
History (2)

purl	pkg:alpm/archlinux/krb5@1.15.1-1

Next non-vulnerable version	1.16.1-1
Latest non-vulnerable version	1.21.3-1
Risk	4.4

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-9hyk-mdvc-1baq Aliases: CVE-2017-11368	krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure	1.15.2-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-qcva-cb6c-wyds Aliases: CVE-2017-11462	krb5: Automatic sec context deletion could lead to double-free	1.15.2-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:26:12.600953+00:00	Arch Linux Importer	Affected by	VCID-9hyk-mdvc-1baq	https://security.archlinux.org/AVG-414	38.0.0
2026-04-01T18:26:12.576035+00:00	Arch Linux Importer	Affected by	VCID-qcva-cb6c-wyds	https://security.archlinux.org/AVG-414	38.0.0