
CVE-Katalog
CVE-2026-11850
An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2)
- Schweregrad
- Medium · CVSS 5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.27% · Oct 22, 2026
An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read. The attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | krb5 | sid | 1.22.1-3 | fixed |
| Debian | krb5 | forky | 1.22.1-3 | fixed |
| Debian | krb5 | trixie | 1.21.3-5+deb13u1 | vulnerable |
| Debian | krb5 | trixie-security | 1.21.3-5+deb13u1 | vulnerable |
| Debian | krb5 | bookworm | 1.20.1-2+deb12u5 | vulnerable |
| Debian | krb5 | bookworm-security | 1.20.1-2+deb12u5 | vulnerable |
| Cpe | krb5 | Not reported | Not reported | vulnerable |
| Ubuntu | krb5 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-admin-server | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-doc | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-gss-samples | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-k5tls | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-kdc | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-kdc-ldap | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-kpropd | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-locales | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-multidev | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-otp | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-pkinit | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5-user | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libgssapi-krb5-2 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libgssrpc4t64 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libk5crypto3 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkadm5clnt-mit12 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkadm5srv-mit12 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkdb5-10t64 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkrad-dev | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkrad0 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkrb5-3 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkrb5-dev | noble | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | libkrb5support0 | noble | 1.20.1-6ubuntu2.7 | fixed |
| Suse | krb5 | linux micro 6.0 | 1.20.1-9.1 | fixed |
| Ubuntu | krb5 | 22.04 | 1.18.3-6 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.18.3-7 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-0ubuntu1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.2 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.3 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.4 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.5 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.6 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.7 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.8 | fixed |
| Ubuntu | krb5 | 24.04 | 1.20.1-3ubuntu1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-5build1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.2 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.3 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.4 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.5 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.6 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5 | 26.04 | 1.21.3-5ubuntu2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu3 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu4 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu4.1 | fixed |
| Ubuntu | krb5 | pro | 1.15.1-2 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2build1 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.1 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.1+esm1 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.2 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.3 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.4 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.4+esm1 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.4+esm2 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.4+esm3 | vulnerable |
| Ubuntu | krb5 | pro | 1.16-2ubuntu0.4+esm5 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu3 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.1 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.2 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.3 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.4 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.6 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.7 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.8 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.9 | vulnerable |
| Ubuntu | krb5 | 20.04 | 1.17-6ubuntu4.11 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.18.3-6 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.18.3-7 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-0ubuntu1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.1 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.2 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.3 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.4 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.5 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.6 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.7 | vulnerable |
| Ubuntu | krb5 | 22.04 | 1.19.2-2ubuntu0.8 | fixed |
| Ubuntu | krb5 | 24.04 | 1.20.1-3ubuntu1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-5build1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.1 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.2 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.3 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.4 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.5 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.6 | vulnerable |
| Ubuntu | krb5 | 24.04 | 1.20.1-6ubuntu2.7 | fixed |
| Ubuntu | krb5 | 25.10 | 1.21.3-4ubuntu2 | vulnerable |
| Ubuntu | krb5 | 25.10 | 1.21.3-5ubuntu1 | vulnerable |
| Ubuntu | krb5 | 25.10 | 1.21.3-5ubuntu2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.21.3-5ubuntu2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu2 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu3 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu4 | vulnerable |
| Ubuntu | krb5 | 26.04 | 1.22.1-2ubuntu4.1 | fixed |
| Suse | krb5 | linux enterprise micro 5.3 | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise micro 5.4 | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise high performance computing 15 sp4-espos | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise high performance computing 15 sp4-ltss | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise server 15 sp4-ltss | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise server for sap applications 15 sp4 | 1.19.2-150400.3.24.1 | fixed |
| Suse | krb5 | linux enterprise micro 5.5 | 1.20.1-150500.3.23.1 | fixed |
| Suse | krb5 | linux enterprise high performance computing 15 sp5-espos | 1.20.1-150500.3.23.1 | fixed |
| Suse | krb5 | linux enterprise high performance computing 15 sp5-ltss | 1.20.1-150500.3.23.1 | fixed |
| Suse | krb5 | linux enterprise server 15 sp5-ltss | 1.20.1-150500.3.23.1 | fixed |
| Suse | krb5 | linux enterprise server for sap applications 15 sp5 | 1.20.1-150500.3.23.1 | fixed |
| Suse | krb5 | linux enterprise server 12 sp5-ltss | 1.16.3-46.24.1 | fixed |
| Suse | krb5 | linux enterprise server ltss extended security 12 sp5 | 1.16.3-46.24.1 | fixed |
| Suse | krb5 | linux enterprise module for basesystem 15 sp7 | 1.20.1-150600.11.19.1 | fixed |
| Suse | krb5 | linux enterprise module for server applications 15 sp7 | 1.20.1-150600.11.19.1 | fixed |
| Suse | krb5 | linux enterprise server 15 sp6-ltss | 1.20.1-150600.11.19.1 | fixed |
| Suse | krb5 | linux enterprise server for sap applications 15 sp6 | 1.20.1-150600.11.19.1 | fixed |
| Opensuse | krb5 | leap 16.0 | 1.21.3-160000.4.1 | fixed |
| Suse | krb5 | linux micro 6.1 | 1.21.3-slfo.1.1_5.1 | fixed |
| Opensuse | krb5 | tumbleweed | 1.22.2-4.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | krb5 | source | sid | 1.22.1-3 | unimportant | Not reported | [1139821] |
| Debian | krb5 | source | forky | 1.22.1-3 | unimportant | Not reported | [1139821] |
| Debian | krb5 | source | trixie | (unfixed) | unimportant | Not reported | [1139821] |
| Debian | krb5 | source | bookworm | (unfixed) | unimportant | Not reported | [1139821] |
| Ubuntu | krb5 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-admin-server | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-doc | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-gss-samples | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-k5tls | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-kdc | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-kdc-ldap | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-kpropd | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-locales | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-multidev | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-otp | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-pkinit | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | krb5-user | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libgssapi-krb5-2 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libgssrpc4t64 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libk5crypto3 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkadm5clnt-mit12 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkadm5srv-mit12 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkdb5-10t64 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkrad-dev | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkrad0 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkrb5-3 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkrb5-dev | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Ubuntu | libkrb5support0 | deb | noble | 1.20.1-6ubuntu2.7 | Not reported | Not reported | Not reported |
| Suse | krb5 | rpm | linux micro 6.0 | 1.20.1-9.1 | Not reported | SUSE-SU-2026:22702-1 | Not reported |
| Ubuntu | krb5 | deb | 22.04 | 1.19.2-2ubuntu0.8 | Not reported | USN-8585-1 | Not reported |
| Ubuntu | krb5 | deb | 24.04 | 1.20.1-6ubuntu2.7 | Not reported | USN-8585-1 | Not reported |
| Ubuntu | krb5 | deb | 26.04 | 1.22.1-2ubuntu4.1 | Not reported | USN-8585-1 | Not reported |
| Ubuntu | krb5 | deb | 22.04 | 1.19.2-2ubuntu0.8 | Not reported | UBUNTU-CVE-2026-11850 | Not reported |
| Ubuntu | krb5 | deb | 24.04 | 1.20.1-6ubuntu2.7 | Not reported | UBUNTU-CVE-2026-11850 | Not reported |
| Ubuntu | krb5 | deb | 26.04 | 1.22.1-2ubuntu4.1 | Not reported | UBUNTU-CVE-2026-11850 | Not reported |
| Suse | krb5 | rpm | linux enterprise micro 5.3 | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise micro 5.4 | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise high performance computing 15 sp4-espos | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server 15 sp4-ltss | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server for sap applications 15 sp4 | 1.19.2-150400.3.24.1 | Not reported | SUSE-SU-2026:2954-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise micro 5.5 | 1.20.1-150500.3.23.1 | Not reported | SUSE-SU-2026:2847-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise high performance computing 15 sp5-espos | 1.20.1-150500.3.23.1 | Not reported | SUSE-SU-2026:2847-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.20.1-150500.3.23.1 | Not reported | SUSE-SU-2026:2847-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server 15 sp5-ltss | 1.20.1-150500.3.23.1 | Not reported | SUSE-SU-2026:2847-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server for sap applications 15 sp5 | 1.20.1-150500.3.23.1 | Not reported | SUSE-SU-2026:2847-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server 12 sp5-ltss | 1.16.3-46.24.1 | Not reported | SUSE-SU-2026:2849-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server ltss extended security 12 sp5 | 1.16.3-46.24.1 | Not reported | SUSE-SU-2026:2849-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise module for basesystem 15 sp7 | 1.20.1-150600.11.19.1 | Not reported | SUSE-SU-2026:2848-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise module for server applications 15 sp7 | 1.20.1-150600.11.19.1 | Not reported | SUSE-SU-2026:2848-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server 15 sp6-ltss | 1.20.1-150600.11.19.1 | Not reported | SUSE-SU-2026:2848-1 | Not reported |
| Suse | krb5 | rpm | linux enterprise server for sap applications 15 sp6 | 1.20.1-150600.11.19.1 | Not reported | SUSE-SU-2026:2848-1 | Not reported |
| Opensuse | krb5 | rpm | leap 16.0 | 1.21.3-160000.4.1 | Not reported | OPENSUSE-SU-2026:21238-1 | Not reported |
| Suse | krb5 | rpm | linux micro 6.1 | 1.21.3-slfo.1.1_5.1 | Not reported | SUSE-SU-2026:22450-1 | Not reported |
| Opensuse | krb5 | rpm | tumbleweed | 1.22.2-4.1 | Not reported | OPENSUSE-SU-2026:11177-1 | Not reported |
OpenFactory catalog packages
Die Paketzuordnung läuft.
[Debian 12 (Bookworm)]
- [krb5-admin-server]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-doc]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· all · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-gss-samples]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-k5tls]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-kdc]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-kdc-ldap]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-kpropd]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-locales]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· all · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· all · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-multidev]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-otp]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-pkinit]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [krb5-user]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libgssapi-krb5-2]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libgssrpc4]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libk5crypto3]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libkadm5clnt-mit12]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libkadm5srv-mit12]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libkdb5-10]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libkrad0]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
- [libkrad-dev]Unbekannt
Quellpaket: [krb5]
Details (4)
1.20.1-2+deb12u5· amd64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookwormBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· amd64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
1.20.1-2+deb12u5· arm64 · bookworm-securityBetroffen
nvd · krb5 · debian · bookworm; nvd · krb5 · debian · 12
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:25520]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-11850]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-11850]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22450-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22702-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2847-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2848-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2849-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2954-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-11850]
- [https://osv.dev/vulnerability/USN-8585-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11177-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21238-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-11850]
- [https://ubuntu.com/security/notices/USN-8585-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1900.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]