Logo
›
›vulnerability›CVE-2024-26458
Name
CVE-2024-26458
Source
NVD ( link)Debian ( link)
Description
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CWEs
CWE-401
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.mdExploit
https://security.netapp.com/advisory/ntap-20240415-0010/Third Party Advisory
https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.mdExploit
https://security.netapp.com/advisory/ntap-20240415-0010/Third Party Advisory

Analysis#

Affected Component
Analysis
krb5
Patched

Vulnerability Ratings#

5.3
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
libkrb5
buildroot
2025.02.x
1.21.3
Not Affected
libkrb5
buildroot
master
1.22.2
Not Affected
krb5
openwrt
master
1.22.2-r1
Not Affected
krb5
openwrt
openwrt-25.12
1.22.1-r1
Not Affected
krb5
yocto
kirkstone
1.17.2
Patched
krb5
yocto
master
1.22.2
Not Affected

Resolved with patches#

krb5 (yocto:kirkstone)

#
Title
Author
Resolve
1
Fix two unlikely memory leaks
Greg Hudson <ghudson@mit.edu>
CVE-2024-26458
CVE-2024-26461

krb5 (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix two unlikely memory leaks
Greg Hudson <ghudson@mit.edu>
CVE-2024-26458
CVE-2024-26461