CVE catalog

CVE-2018-20217

krb5: CVE-2018-20217

Severity: Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Dec 26, 2018, 9:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.42% · Oct 22, 2026

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	krb5	sid	`1.22.1-3`	fixed
Debian	krb5	forky	`1.22.1-3`	fixed
Debian	krb5	trixie	`1.21.3-5+deb13u1`	fixed
Debian	krb5	trixie-security	`1.21.3-5+deb13u1`	fixed
Debian	krb5	bookworm	`1.20.1-2+deb12u5`	fixed
Debian	krb5	bookworm-security	`1.20.1-2+deb12u5`	fixed
Ubuntu	krb5	pro	`1.13.2+dfsg-2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-3`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-4`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.1+esm1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.2+esm3`	fixed
Ubuntu	krb5	18.04	`1.15.1-2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2build1`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.1`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.3`	fixed
Ubuntu	krb5	20.04	`1.17-6`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu3`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.1`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.2`	fixed
Ubuntu	krb5	22.04	`1.18.3-6`	vulnerable
Ubuntu	krb5	22.04	`1.18.3-7`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-0ubuntu1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.1`	fixed
Alpine	krb5	3.10	`1.15.4-r0`	fixed
Alpine	krb5	3.11	`1.15.4-r0`	fixed
Alpine	krb5	3.12	`1.15.4-r0`	fixed
Alpine	krb5	3.13	`1.15.4-r0`	fixed
Alpine	krb5	3.14	`1.15.4-r0`	fixed
Alpine	krb5	3.15	`1.15.4-r0`	fixed
Alpine	krb5	3.16	`1.15.4-r0`	fixed
Alpine	krb5	3.17	`1.15.4-r0`	fixed
Alpine	krb5	3.18	`1.15.4-r0`	fixed
Alpine	krb5	3.19	`1.15.4-r0`	fixed
Alpine	krb5	3.20	`1.15.4-r0`	fixed
Alpine	krb5	3.21	`1.15.4-r0`	fixed
Alpine	krb5	3.22	`1.15.4-r0`	fixed
Alpine	krb5	3.23	`1.15.4-r0`	fixed
Alpine	krb5	3.24	`1.15.4-r0`	fixed
Alpine	krb5	3.6	`1.14.3-r3`	fixed
Alpine	krb5	3.7	`1.15.4-r0`	fixed
Alpine	krb5	3.8	`1.15.4-r0`	fixed
Alpine	krb5	3.9	`1.15.4-r0`	fixed
Ubuntu	krb5	pro	`1.13.2+dfsg-2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-3`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-4`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.1+esm1`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.2`	vulnerable
Ubuntu	krb5	pro	`1.13.2+dfsg-5ubuntu2.2+esm3`	fixed
Ubuntu	krb5	18.04	`1.15.1-2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2build1`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.1`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.2`	vulnerable
Ubuntu	krb5	18.04	`1.16-2ubuntu0.3`	fixed
Opensuse	krb5	tumbleweed	`1.19.2-3.1`	fixed
Suse	krb5	linux enterprise server 12-ltss	`1.12.1-38.13.2`	fixed
Suse	krb5	linux enterprise server 12 sp1-ltss	`1.12.1-38.13.2`	fixed
Suse	krb5	openstack cloud 7	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise desktop 12 sp3	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise desktop 12 sp4	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp2	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise software development kit 12 sp3	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise software development kit 12 sp4	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server 12 sp2-ltss	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server 12 sp2-bcl	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server 12 sp3	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp3	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server 12 sp4	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp4	`1.12.5-40.31.1`	fixed
Suse	krb5	enterprise storage 4	`1.12.5-40.31.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp1	`1.12.1-38.13.2`	fixed
Opensuse	krb5	leap 15.0	`1.15.2-lp150.5.3.1`	fixed
Opensuse	krb5-mini	leap 15.0	`1.15.2-lp150.5.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	krb5	source	sid	`1.16.2-1`	low	Not reported	[917387]
Debian	krb5	source	forky	`1.16.2-1`	low	Not reported	[917387]
Debian	krb5	source	trixie	`1.16.2-1`	low	Not reported	[917387]
Debian	krb5	source	bookworm	`1.16.2-1`	low	Not reported	[917387]
Ubuntu	krb5	deb	pro	`1.13.2+dfsg-5ubuntu2.2+esm3`	Not reported	USN-5828-1	Not reported
Ubuntu	krb5	deb	18.04	`1.16-2ubuntu0.3`	Not reported	USN-5828-1	Not reported
Ubuntu	krb5	deb	20.04	`1.17-6ubuntu4.2`	Not reported	USN-5828-1	Not reported
Ubuntu	krb5	deb	22.04	`1.19.2-2ubuntu0.1`	Not reported	USN-5828-1	Not reported
Alpine	krb5	apk	3.10	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.11	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.12	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.13	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.14	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.15	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.16	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.17	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.18	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.19	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.20	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.21	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.22	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.23	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.24	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.6	`1.14.3-r3`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.7	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.8	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Alpine	krb5	apk	3.9	`1.15.4-r0`	Not reported	ALPINE-CVE-2018-20217	Not reported
Ubuntu	krb5	deb	pro	`1.13.2+dfsg-5ubuntu2.2+esm3`	Not reported	UBUNTU-CVE-2018-20217	Not reported
Ubuntu	krb5	deb	18.04	`1.16-2ubuntu0.3`	Not reported	UBUNTU-CVE-2018-20217	Not reported
Opensuse	krb5	rpm	tumbleweed	`1.19.2-3.1`	Not reported	OPENSUSE-SU-2024:11549-1	Not reported
Suse	krb5	rpm	linux enterprise server 12-ltss	`1.12.1-38.13.2`	Not reported	SUSE-SU-2019:0113-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp1-ltss	`1.12.1-38.13.2`	Not reported	SUSE-SU-2019:0113-1	Not reported
Suse	krb5	rpm	openstack cloud 7	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise desktop 12 sp3	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise desktop 12 sp4	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp2	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise software development kit 12 sp3	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise software development kit 12 sp4	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp2-ltss	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp2-bcl	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp3	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp3	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp4	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp4	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	enterprise storage 4	`1.12.5-40.31.1`	Not reported	SUSE-SU-2019:0111-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp1	`1.12.1-38.13.2`	Not reported	SUSE-SU-2019:0113-2	Not reported
Opensuse	krb5	rpm	leap 15.0	`1.15.2-lp150.5.3.1`	Not reported	OPENSUSE-SU-2019:0063-1	Not reported
Opensuse	krb5-mini	rpm	leap 15.0	`1.15.2-lp150.5.3.1`	Not reported	OPENSUSE-SU-2019:0063-1	Not reported

[Debian bug #917387]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[krb5-32bit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-client]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-devel]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-devel-32bit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-kdb-ldap]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-otp]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-pkinit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-spake]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-server]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.19.2-3.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[krb5-admin-server]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-doc]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · all · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-gss-samples]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-k5tls]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-kdc]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-kdc-ldap]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-kpropd]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-locales]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · all · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · all · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-multidev]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-otp]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
[krb5-pkinit]Fixed
Source package: [krb5]
Details (4)
- 1.20.1-2+deb12u5 · amd64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12
- 1.20.1-2+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 1.16.2-1
  dsa · krb5 · debian · bookworm; dsa · krb5 · debian · 12

Next results

Observed: Oct 23, 2026, 5:35:59 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]