Search for packages
| purl | pkg:deb/debian/krb5@1.15-1%2Bdeb9u1 |
| Next non-vulnerable version | 1.20.1-2+deb12u4 |
| Latest non-vulnerable version | 1.20.1-2+deb12u4 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2r88-c5e9-vffv
Aliases: CVE-2018-5729 |
krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data |
Affected by 9 other vulnerabilities. |
|
VCID-3362-hawt-17ek
Aliases: CVE-2025-3576 |
krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions |
Affected by 0 other vulnerabilities. |
|
VCID-3du2-evy8-jfa1
Aliases: CVE-2022-42898 |
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-8yk4-du7p-eue4
Aliases: CVE-2021-36222 |
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution. |
Affected by 9 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-97k8-xbsv-87da
Aliases: CVE-2024-37371 |
krb5: GSS message token handling |
Affected by 2 other vulnerabilities. |
|
VCID-985p-gnv3-mfd8
Aliases: CVE-2018-5730 |
krb5: DN container check bypass by supplying special crafted data |
Affected by 9 other vulnerabilities. |
|
VCID-9hyk-mdvc-1baq
Aliases: CVE-2017-11368 |
krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure |
Affected by 9 other vulnerabilities. |
|
VCID-bwpn-qxzd-43g8
Aliases: CVE-2023-36054 |
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-fd9s-vn5s-gud6
Aliases: CVE-2018-20217 |
krb5: Reachable assertion in the KDC using S4U2Self requests |
Affected by 9 other vulnerabilities. |
|
VCID-h9q8-x3n3-6qdn
Aliases: CVE-2020-28196 |
A vulnerability in MIT Kerberos 5 could lead to a Denial of Service condition. |
Affected by 9 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-khdw-3p5j-vya6
Aliases: CVE-2025-24528 |
krb5: overflow when calculating ulog block size |
Affected by 0 other vulnerabilities. |
|
VCID-qcva-cb6c-wyds
Aliases: CVE-2017-11462 |
krb5: Automatic sec context deletion could lead to double-free |
Affected by 9 other vulnerabilities. |
|
VCID-r1wa-3gtw-1qey
Aliases: CVE-2017-15088 |
krb5: Buffer overflow in get_matching_data() |
Affected by 9 other vulnerabilities. |
|
VCID-w6yc-w573-vbhy
Aliases: CVE-2024-37370 |
krb5: GSS message token handling |
Affected by 2 other vulnerabilities. |
|
VCID-zw66-w86u-cuge
Aliases: CVE-2021-37750 |
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-zx87-dep4-8bg2
Aliases: CVE-2018-5710 |
krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c |
Affected by 9 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8rxc-tf1r-wqgm | krb5: S4U2Self KDC crash when anon is restricted |
CVE-2016-3120
|
| VCID-a9bp-26kx-p7cb | security flaw |
CVE-2004-0971
|
| VCID-bnpa-8svd-jyct | Multiple vulnerabilities have been discovered in MIT Kerberos 5, the worst of which may allow remote attackers to cause Denial of Service. |
CVE-2015-2697
|
| VCID-caxe-5ejt-ffgy | krb5: IAKERB context export/import |
CVE-2015-2698
|
| VCID-fg2w-sjkb-ebgb | security update |
CVE-2015-8629
|
| VCID-j6tv-fz95-3kb8 | krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass |
CVE-2015-2694
|
| VCID-q2tg-s1kk-4bhc | Multiple vulnerabilities have been discovered in MIT Kerberos 5, the worst of which may allow remote attackers to cause Denial of Service. |
CVE-2015-2696
|
| VCID-rpxk-f19y-87dq | Multiple vulnerabilities have been discovered in MIT Kerberos 5, the worst of which may allow remote attackers to cause Denial of Service. |
CVE-2015-2695
|
| VCID-sgnn-emh7-kqgh | security update |
CVE-2015-8631
|
| VCID-z6ca-snvn-jyh9 | krb5: null pointer dereference in kadmin |
CVE-2016-3119
|
| VCID-zxvf-pz4q-myey | krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask |
CVE-2015-8630
|