Debian/krb5: unknown

Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of

Action: Upgrade krb5 to 1.6.dfsg.4~beta1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5901#Debian:13/krb5
• https://security-tracker.debian.org/tracker/CVE-2007-5901

published 2007-12-06T02:46:00Z · modified 2026-10-21T17:47:43.767610772Z · JSON