CVE-2025-24528
High · 7.1CVSS
7.1
EPSS
0.5%
Published
Jan 16, 2026
CISA due date
—
The record
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | krb5-devel | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | krb5-libs | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | krb5-pkinit | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | krb5-server | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | krb5-server-ldap | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | krb5-workstation | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:8 | libkadm5 | 0 | 1.18.2-31.el8_10 |
| AlmaLinux:9 | krb5-devel | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | krb5-libs | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | krb5-pkinit | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | krb5-server | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | krb5-server-ldap | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | krb5-workstation | 0 | 1.21.1-6.el9 |
| AlmaLinux:9 | libkadm5 | 0 | 1.21.1-6.el9 |
| Mageia:9 | krb5 | 0 | 1.20.1-1.4.mga9 |
| SUSE:Linux Enterprise Micro 5.1 | krb5 | 0 | 1.19.2-150300.22.1 |
| SUSE:Linux Enterprise Micro 5.2 | krb5 | 0 | 1.19.2-150300.22.1 |
| SUSE:Linux Enterprise Micro 5.3 | krb5 | 0 | 1.19.2-150400.3.15.1 |
| SUSE:Linux Enterprise Micro 5.4 | krb5 | 0 | 1.19.2-150400.3.15.1 |
| SUSE:Linux Enterprise Micro 5.5 | krb5 | 0 | 1.20.1-150500.3.12.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | crypto-policies | 0 | 20230920.570ea89-150600.3.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | krb5 | 0 | 1.20.1-150600.11.8.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | krb5 | 0 | 1.20.1-150600.11.8.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | krb5 | 0 | 1.16.3-46.18.1 |
| openSUSE:Leap 15.6 | crypto-policies | 0 | 20230920.570ea89-150600.3.3.1 |
| openSUSE:Leap 15.6 | krb5 | 0 | 1.20.1-150600.11.8.1 |
| openSUSE:Tumbleweed | krb5 | 0 | 1.21.3-2.1 |
Related vulnerabilities
- CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who… Also affects krb5-devel
- CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads… Also affects krb5-devel
- CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra… Also affects krb5-devel
- CVE-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in… Also affects krb5-devel
- CVE-2024-26458 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. Also affects krb5-devel
- CVE-2024-26462 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. Also affects krb5-devel
- CVE-2026-11850 An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function… Also affects krb5
- CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant… Also affects krb5