Medium severity5.5NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026
CVE-2024-26462
CVE-2024-26462
Description
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23- osv-coords13 versionspkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5pkg:rpm/almalinux/krb5-workstationpkg:rpm/opensuse/krb5&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/krb5-develpkg:rpm/almalinux/krb5-serverpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/almalinux/libkadm5pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/almalinux/krb5-server-ldappkg:rpm/almalinux/krb5-libspkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/almalinux/krb5-pkinitpkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%2015.5
< 1.20.1-150500.3.6.1+ 12 more
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.2-3.1
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.20.1-5.1
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.20.1-150500.3.6.1
- Range: =1.21.2
- cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
- cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
- Kerberos 5/krb5description
Patches
Vulnerability mechanics
References
2- github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.mdnvdExploit
- security.netapp.com/advisory/ntap-20240415-0012/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.