DEBIAN-CVE-2026-112315: Medium severity debian/krb5 vulnerability
The RPCSECGSS authentication routines in lib/rpc/authgssprot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSECGSS messages.
Affected Software
Event History
Frequently Asked Questions
Which service is directly affected by this flaw?
The described denial of service occurs in kadmind, where crafted RPCSEC_GSS messages can trigger a memory leak.
What does an attacker need to exploit it?
An attacker needs the ability to send crafted RPCSEC_GSS messages to the affected service. The supplied vector indicates network access is sufficient and requires no privileges or user interaction.
What is the practical impact of successful exploitation?
Successful exploitation causes partially decoded buffers not to be freed, leaking memory in kadmind. Repeated requests could degrade availability or cause a denial of service.