{"id":"UBUNTU-CVE-2024-26462","details":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.","modified":"2026-04-22T17:38:51.339707Z","published":"2024-02-29T01:44:00Z","related":["USN-7314-1"],"upstream":["CVE-2024-26462"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-26462"},{"type":"REPORT","url":"https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2024-26462"},{"type":"REPORT","url":"https://mailman.mit.edu/pipermail/kerberos/2024-March/023095.html"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7314-1"}],"affected":[{"package":{"name":"krb5","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/krb5@1.20.1-6ubuntu2.5?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-6ubuntu2.5"}]}],"versions":["1.20.1-3ubuntu1","1.20.1-5build1","1.20.1-6ubuntu1","1.20.1-6ubuntu2","1.20.1-6ubuntu2.1","1.20.1-6ubuntu2.2","1.20.1-6ubuntu2.3","1.20.1-6ubuntu2.4"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"krb5-admin-server","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-gss-samples","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-k5tls","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-kdc","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-kdc-ldap","binary_version":"1.20.1-6ubuntu2.5"},{"binary_version":"1.20.1-6ubuntu2.5","binary_name":"krb5-kpropd"},{"binary_name":"krb5-locales","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-multidev","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-otp","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-pkinit","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"krb5-user","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libgssapi-krb5-2","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libgssrpc4t64","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libk5crypto3","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libkadm5clnt-mit12","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libkadm5srv-mit12","binary_version":"1.20.1-6ubuntu2.5"},{"binary_version":"1.20.1-6ubuntu2.5","binary_name":"libkdb5-10t64"},{"binary_name":"libkrad0","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libkrb5-3","binary_version":"1.20.1-6ubuntu2.5"},{"binary_name":"libkrb5support0","binary_version":"1.20.1-6ubuntu2.5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-26462.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}