← All advisories

Medium severity5.5NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026

CVE-2024-26462

CVE-2024-26462

Description

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15

Kerberos 5/krb5description
MIT Kerberos/Kerberosllm-fuzzy
Range: =1.21.2
osv-coords13 versions
pkg:rpm/almalinux/krb5-devel pkg:rpm/almalinux/krb5-libs pkg:rpm/almalinux/krb5-pkinit pkg:rpm/almalinux/krb5-server pkg:rpm/almalinux/krb5-server-ldap pkg:rpm/almalinux/krb5-workstation pkg:rpm/almalinux/libkadm5 pkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/krb5&distro=openSUSE%20Tumbleweed pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5 pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Micro%206.0
< 1.21.1-3.el9+ 12 more
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.21.1-3.el9
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.21.2-3.1
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.20.1-150500.3.6.1
- (no CPE)range: < 1.20.1-5.1

Patches

Vulnerability mechanics

References

2

github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.mdnvdExploit
security.netapp.com/advisory/ntap-20240415-0012/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.