CVE-2024-26461: High severity MIT Kerberos 5 vulnerability
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/krb5to a version that resolves this vulnerability.Fixed in 1.22.1-2 - Upgrade
Upgrade
debian/krb5to a version that resolves this vulnerability.Fixed in 1.22.1-3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26461?
CVE-2024-26461 is classified as a medium severity vulnerability due to its potential impact on system performance through memory leaks.
How do I fix CVE-2024-26461?
To fix CVE-2024-26461, upgrade to a version of Kerberos 5 that is higher than 1.21.2.
What systems are affected by CVE-2024-26461?
CVE-2024-26461 affects IBM Storage Defender - Resiliency Service versions 2.0.0 to 2.0.9.
What causes the memory leak in CVE-2024-26461?
The memory leak in CVE-2024-26461 is caused by improper handling of memory in the k5sealv3.c file in Kerberos 5.
Is CVE-2024-26461 a remote vulnerability?
CVE-2024-26461 is not a remote vulnerability, but it can affect applications utilizing the vulnerable Kerberos library.