CVE-2026-42483: Buffer Overflow
A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The issue affects modulehashdecode in multiple Kerberos-related modules because accountinfolen is calculated from untrusted delimiter positions without upper-bound validation before memcpy copies the data into a fixed-size accountinfo buffer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42483?
CVE-2026-42483 is a medium severity vulnerability due to its potential for denial of service and execution of arbitrary code.
How do I fix CVE-2026-42483?
To fix CVE-2026-42483, upgrade Hashcat to version 7.1.3 or later where the vulnerability has been addressed.
What type of vulnerability is CVE-2026-42483?
CVE-2026-42483 is a heap-based buffer overflow vulnerability affecting the Kerberos hash parser in Hashcat.
What software is affected by CVE-2026-42483?
CVE-2026-42483 affects Hashcat version 7.1.2 and earlier.
What could an attacker achieve by exploiting CVE-2026-42483?
An attacker exploiting CVE-2026-42483 could cause a denial of service or potentially execute arbitrary code on the affected system.