CVE-2024-26462: Medium severity MIT Kerberos 5 vulnerability
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/krb5to a version that resolves this vulnerability.Fixed in 1.18.3-6+deb11u5Fixed in 1.18.3-6+deb11u6Fixed in 1.21.3-4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26462?
CVE-2024-26462 is classified as a high-severity memory leak vulnerability in Kerberos 5 version 1.21.2.
How do I fix CVE-2024-26462?
To address CVE-2024-26462, upgrade Kerberos 5 to a version that is not affected by this vulnerability.
What are the potential impacts of CVE-2024-26462?
The memory leak in CVE-2024-26462 can lead to increased memory consumption and potentially affect the performance of affected systems.
Which software versions are affected by CVE-2024-26462?
CVE-2024-26462 affects Kerberos 5 version 1.21.2 and specific versions of IBM Storage Defender - Resiliency Service up to 2.0.9.
Is there a workaround for CVE-2024-26462?
Currently, the best workaround for CVE-2024-26462 is to ensure that any impacted systems are monitored for increased memory usage until a patch can be applied.