Vulnerabilities in MIT
7 resultsCVE-2019-14844HIGHA flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending oEPSS 4.4%CVE-2017-7562MEDIUMAn authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A EPSS 3.2%CVE-2026-40355MEDIUMIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a systemEPSS 0.6%CVE-2026-40356MEDIUMIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accepEPSS 0.6%CVE-2026-107708MEDIUMMIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PACEPSS 0.5%CVE-2025-24528HIGHIn MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() inEPSS 0.5%CVE-2026-107778HIGHMIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()EPSS 0.4%