Debian/krb5: high 7.1
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bo
Action: Upgrade krb5 to 1.21.3-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.3-5 | - |
Fixed versions
| 1.21.3-5 |
Sources
- osv: DEBIAN-CVE-2025-24528#Debian:13/krb5
- https://security-tracker.debian.org/tracker/CVE-2025-24528
published · modified · JSON