
CVE catalog
CVE-2024-26461
Kerberos vulnerabilities
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.13% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "krb5",
"status": "vulnerable",
"release": "sid",
"version": "1.22.1-3"
},
{
"name": "krb5",
"status": "vulnerable",
"release": "forky",
"version": "1.22.1-3"
},
{
"name": "krb5",
"status": "vulnerable",
"release": "trixie",
"version": "1.21.3-5+deb13u1"
},
{
"name": "krb5",
"status": "vulnerable",
"release": "trixie-security",
"version": "1.21.3-5+deb13u1"
},
{
"name": "krb5",
"status": "vulnerable",
"release": "bookworm",
"version": "1.20.1-2+deb12u5"
},
{
"name": "krb5",
"status": "vulnerable",
"release": "bookworm-security",
"version": "1.20.1-2+deb12u5"
}
],
"fixed_versions": [
{
"bug": 1098754,
"name": "krb5",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "unimportant",
"fixed_version": ""
},
{
"bug": 1098754,
"name": "krb5",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "unimportant",
"fixed_version": ""
},
{
"bug": 1098754,
"name": "krb5",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "unimportant",
"fixed_version": ""
},
{
"bug": 1098754,
"name": "krb5",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "unimportant",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "krb5",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "not yet fixed"
},
{
"name": "krb5",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-admin-server",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-doc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-gss-samples",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-k5tls",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-kdc",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-kdc-ldap",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-kpropd",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-locales",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-multidev",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-otp",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-pkinit",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5-user",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libgssapi-krb5-2",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libgssrpc4t64",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libk5crypto3",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkadm5clnt-mit12",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkadm5srv-mit12",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkdb5-10t64",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkrad-dev",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkrad0",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkrb5-3",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkrb5-dev",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "libkrb5support0",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5"
},
{
"name": "krb5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"1.15.1-2",
"1.16-2",
"1.16-2build1",
"1.16-2ubuntu0.1",
"1.16-2ubuntu0.1+esm1",
"1.16-2ubuntu0.2",
"1.16-2ubuntu0.3",
"1.16-2ubuntu0.4",
"1.16-2ubuntu0.4+esm1",
"1.16-2ubuntu0.4+esm2",
"1.16-2ubuntu0.4+esm3",
"1.16-2ubuntu0.4+esm5"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2024-26461"
},
{
"name": "krb5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.17-6ubuntu4.9"
}
]
}
],
"release": "20.04",
"versions": [
"1.17-6",
"1.17-6ubuntu3",
"1.17-6ubuntu4",
"1.17-6ubuntu4.1",
"1.17-6ubuntu4.2",
"1.17-6ubuntu4.3",
"1.17-6ubuntu4.4",
"1.17-6ubuntu4.6",
"1.17-6ubuntu4.7",
"1.17-6ubuntu4.8"
],
"ecosystem": "deb",
"fixed_version": "1.17-6ubuntu4.9",
"provider_record_id": "UBUNTU-CVE-2024-26461"
},
{
"name": "krb5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.19.2-2ubuntu0.6"
}
]
}
],
"release": "22.04",
"versions": [
"1.18.3-6",
"1.18.3-7",
"1.19.2-0ubuntu1",
"1.19.2-1",
"1.19.2-2",
"1.19.2-2ubuntu0.1",
"1.19.2-2ubuntu0.2",
"1.19.2-2ubuntu0.3",
"1.19.2-2ubuntu0.4",
"1.19.2-2ubuntu0.5"
],
"ecosystem": "deb",
"fixed_version": "1.19.2-2ubuntu0.6",
"provider_record_id": "UBUNTU-CVE-2024-26461"
},
{
"name": "krb5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.1-6ubuntu2.5"
}
]
}
],
"release": "24.04",
"versions": [
"1.20.1-3ubuntu1",
"1.20.1-5build1",
"1.20.1-6ubuntu1",
"1.20.1-6ubuntu2",
"1.20.1-6ubuntu2.1",
"1.20.1-6ubuntu2.2",
"1.20.1-6ubuntu2.3",
"1.20.1-6ubuntu2.4"
],
"ecosystem": "deb",
"fixed_version": "1.20.1-6ubuntu2.5",
"provider_record_id": "UBUNTU-CVE-2024-26461"
},
{
"name": "krb5",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.21.3-4ubuntu2"
}
]
}
],
"release": "25.10",
"versions": [],
"ecosystem": "deb",
"fixed_version": "1.21.3-4ubuntu2",
"provider_record_id": "UBUNTU-CVE-2024-26461"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [krb5-admin-server]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-doc]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· all · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-gss-samples]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-k5tls]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-kdc]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-kdc-ldap]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-kpropd]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-locales]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· all · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-multidev]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-otp]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-pkinit]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [krb5-user]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libgssapi-krb5-2]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libgssrpc4]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libk5crypto3]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libkadm5clnt-mit12]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libkadm5srv-mit12]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libkdb5-10]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libkrad0]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
- [libkrad-dev]Unknown
Source package: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityAffected
usn · krb5 · debian · bookworm; usn · krb5 · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_3268.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-26461]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-26461]
- [https://security-tracker.debian.org/tracker/CVE-2024-26461]
- [https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26461.json]
- [https://ubuntu.com/security/notices/USN-7314-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0485.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]