Known Vulnerabilities for Kerberos 5 by Mit
Listed below are 10 of the newest known vulnerabilities associated with "Kerberos 5" by "Mit".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-35337 json | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When proces... | Not Provided | 2026-04-13 | 2026-04-14 |
| CVE-2026-33995 json | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerb... | Not Provided | 2026-03-30 | 2026-03-30 |
| CVE-2026-31392 json | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Custom... | Not Provided | 2026-04-03 | 2026-04-06 |
| CVE-2026-27912 json | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. | Not Provided | 2026-04-14 | 2026-04-16 |
| CVE-2025-59089 json | If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery), th... | Not Provided | 2025-11-12 | 2026-04-20 |
| CVE-2025-37924 json | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Se... | Not Provided | 2025-05-20 | 2026-04-02 |
| CVE-2023-39975 json | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user... | 8.8 - HIGH | 2023-08-16 | 2024-02-01 |
| CVE-2023-36054 json | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. ... | 6.5 - MEDIUM | 2023-08-07 | 2023-11-15 |
| CVE-2022-42898 json | PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote... | 8.8 - HIGH | 2022-12-25 | 2023-10-08 |
| CVE-2022-39028 json | telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0x... | 7.5 - HIGH | 2022-08-30 | 2023-09-27 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mit | Kerberos 5 | 16.3 | |||
| Application | Mit | Kerberos 5 | 1.9.5 | |||
| Application | Mit | Kerberos 5 | 1.9.4 | |||
| Application | Mit | Kerberos 5 | 1.9.3 | |||
| Application | Mit | Kerberos 5 | 1.9.2 | |||
| Application | Mit | Kerberos 5 | 1.9.1 | |||
| Application | Mit | Kerberos 5 | 1.9 | |||
| Application | Mit | Kerberos 5 | 1.8.6 | |||
| Application | Mit | Kerberos 5 | 1.8.5 | |||
| Application | Mit | Kerberos 5 | 1.8.4 | |||
| Application | Mit | Kerberos 5 | 1.8.3 | |||
| Application | Mit | Kerberos 5 | 1.8.2 | |||
| Application | Mit | Kerberos 5 | 1.8.1 | |||
| Application | Mit | Kerberos 5 | 1.8 | |||
| Application | Mit | Kerberos 5 | 1.7.2 | |||
| Application | Mit | Kerberos 5 | 1.7.1 | |||
| Application | Mit | Kerberos 5 | 1.7 | |||
| Application | Mit | Kerberos 5 | 1.6.3 | |||
| Application | Mit | Kerberos 5 | 1.6.2 | |||
| Application | Mit | Kerberos 5 | 1.6.1 |