ALPINE-CVE-2026-112314: High severity alpine/krb5 vulnerability
clnttcpcall() in lib/rpc/clnttcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/krb5to a version that resolves this vulnerability.Fixed in 1.22.3-r0
Event History
Frequently Asked Questions
Which deployments are exposed to this denial of service?
The issue affects GSS-RPC client programs using MIT Kerberos 5's TCP RPC client code. Systems that do not use affected GSS-RPC client functionality are not identified as exposed by the available data.
What does an attacker need to do to trigger the leak?
An attacker can inject RPC replies with mismatched XIDs, or cause authentication retries. The vector is network-based and requires no privileges or user interaction according to the supplied severity vector.
What is the impact of successful exploitation?
Repeated triggering can leak memory in the GSS-RPC client process and cause denial of service. The supplied vector indicates availability impact only, with no stated confidentiality or integrity impact.