{"id":"CVE-2024-37371","title":"krb5: GSS message token handling (CVE-2024-37371)","summary":"A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the toke…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-125","vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 9)","affected":["ansible_automation_platform 2","enterprise_linux 6","enterprise_linux_server_aus_v_7_7","enterprise_linux_server_v_7_els","9base_service_interconnect_1_4","service_interconnect 1","enterprise_linux_appstream_v_8","enterprise_linux_appstream_e4s_v_9_0","enterprise_linux_appstream_eus_v_9_2","enterprise_linux_appstream_v_9","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_2","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_e4s_v_8_4","enterprise_linux_baseos_tus_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_e4s_v_8_6","enterprise_linux_baseos_tus_v_8_6","enterprise_linux_baseos_eus_v_8_8","enterprise_linux_baseos_e4s_v_9_0","enterprise_linux_baseos_eus_v_9_2","enterprise_linux_baseos_v_9","codeready_linux_builder_v_9"],"patched":["enterprise_linux_server_aus_v_7_7","enterprise_linux_server_v_7_els","9base_service_interconnect_1_4","service_interconnect 1","enterprise_linux_appstream_v_8","enterprise_linux_appstream_e4s_v_9_0","enterprise_linux_appstream_eus_v_9_2","enterprise_linux_appstream_v_9","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_2","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_e4s_v_8_4","enterprise_linux_baseos_tus_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_e4s_v_8_6","enterprise_linux_baseos_tus_v_8_6","enterprise_linux_baseos_eus_v_8_8","enterprise_linux_baseos_e4s_v_9_0","enterprise_linux_baseos_eus_v_9_2","enterprise_linux_baseos_v_9","codeready_linux_builder_v_9"],"published":"2024-06-27","updated":"2026-10-16","sourceUpdated":"2026-10-16T16:06:25+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-37371"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294676"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37371"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371"},{"url":"https://web.mit.edu/kerberos/www/krb5-1.21/"},{"url":"https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL"},{"url":"https://access.redhat.com/errata/RHSA-2024:5316"},{"url":"https://access.redhat.com/errata/RHSA-2024:5076"},{"url":"https://access.redhat.com/errata/RHSA-2024:7213"},{"url":"https://access.redhat.com/errata/RHSA-2024:10135"},{"url":"https://access.redhat.com/errata/RHSA-2024:11109"},{"url":"https://access.redhat.com/errata/RHSA-2024:7374"},{"url":"https://access.redhat.com/errata/RHSA-2025:1673"},{"url":"https://access.redhat.com/errata/RHSA-2024:5630"},{"url":"https://access.redhat.com/errata/RHSA-2024:5643"},{"url":"https://access.redhat.com/errata/RHSA-2024:6166"},{"url":"https://access.redhat.com/errata/RHBA-2024:6585"},{"url":"https://access.redhat.com/errata/RHSA-2025:1671"},{"url":"https://access.redhat.com/errata/RHSA-2024:5312"},{"url":"https://access.redhat.com/errata/RHSA-2024:5884"},{"url":"https://access.redhat.com/errata/RHSA-2024:4734"},{"url":"https://access.redhat.com/errata/RHSA-2024:5625"},{"url":"https://access.redhat.com/errata/RHSA-2024:4743"},{"url":"https://web.mit.edu/kerberos/www/advisories/"},{"url":"https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef"}],"tags":["csaf","vex","red-hat","cve.org","score-dispute"],"epss":0.01863,"epssPercentile":0.79151,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-07-09T15:31:33.769366Z"},"scores":{"vendor":6.5,"adp":9.1},"ingestedAt":"2026-10-15T04:46:37.322Z","slug":"CVE-2024-37371","body":"## Overview\n\nA vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens.\n\n## Vendor advisories\n\n- **RHSA-2024:5316** · Red Hat · fixed in: Red Hat Enterprise Linux Server AUS (v. 7.7) · released 2024-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2024:5316)\n- **RHSA-2024:5076** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS) · released 2024-08-07 · [advisory](https://access.redhat.com/errata/RHSA-2024:5076)\n- **RHSA-2024:7213** · Red Hat · fixed in: 9Base-Service-Interconnect-1.4 · released 2024-09-26 · [advisory](https://access.redhat.com/errata/RHSA-2024:7213)\n- **RHSA-2024:10135** · Red Hat · fixed in: 9Base-Service-Interconnect-1.4 · released 2024-11-21 · [advisory](https://access.redhat.com/errata/RHSA-2024:10135)\n- **RHSA-2024:11109** · Red Hat · fixed in: Red Hat Service Interconnect 1 · released 2024-12-16 · [advisory](https://access.redhat.com/errata/RHSA-2024:11109)\n- **RHSA-2024:7374** · Red Hat · fixed in: Red Hat Service Interconnect 1 · released 2024-09-30 · [advisory](https://access.redhat.com/errata/RHSA-2024:7374)\n- **RHSA-2025:1673** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8) · released 2025-02-19 · [advisory](https://access.redhat.com/errata/RHSA-2025:1673)\n- **RHSA-2024:5630** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0) · released 2024-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2024:5630)\n- **RHSA-2024:5643** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.2), Red Hat Enterprise Linux BaseOS EUS (v.9.2) · released 2024-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2024:5643)\n- **RHSA-2024:6166** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9) · released 2024-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2024:6166)\n- **RHBA-2024:6585** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9) · released 2024-09-11 · [advisory](https://access.redhat.com/errata/RHBA-2024:6585)\n- **Red Hat VEX** · Moderate · affected: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Ansible Automation Platform 2 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json)\n\n**krb5: GSS message token handling** — rated Moderate by Red Hat. Released 2024-06-27, updated 2026-10-16.\n\nAffected:\n\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 6\n\nFixed:\n\n- Red Hat Enterprise Linux Server AUS (v. 7.7)\n- Red Hat Enterprise Linux Server (v. 7 ELS)\n- 9Base-Service-Interconnect-1.4\n- Red Hat Service Interconnect 1\n- Red Hat Enterprise Linux AppStream (v. 8)\n- Red Hat Enterprise Linux AppStream E4S (v.9.0)\n- Red Hat Enterprise Linux AppStream EUS (v.9.2)\n- Red Hat Enterprise Linux AppStream (v. 9)\n- Red Hat Enterprise Linux BaseOS (v. 8)\n- Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\n- Red Hat Enterprise Linux BaseOS AUS (v.8.4)\n- Red Hat Enterprise Linux BaseOS E4S (v.8.4)\n- Red Hat Enterprise Linux BaseOS TUS (v.8.4)\n- Red Hat Enterprise Linux BaseOS AUS (v.8.6)\n- Red Hat Enterprise Linux BaseOS E4S (v.8.6)\n- Red Hat Enterprise Linux BaseOS TUS (v.8.6)\n- Red Hat Enterprise Linux BaseOS EUS (v.8.8)\n- Red Hat Enterprise Linux BaseOS E4S (v.9.0)\n- Red Hat Enterprise Linux BaseOS EUS (v.9.2)\n- Red Hat Enterprise Linux BaseOS (v. 9)\n- Red Hat CodeReady Linux Builder (v. 9)\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Ansible Automation Platform 2\n\nNot affected:\n\n- Red Hat Enterprise Linux BaseOS E4S (v.8.6)\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:5316\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:5076\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:7213\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[{"seq":223818,"id":"CVE-2024-37371","ts":1792238447475,"field":"cvss","old":"9.1","new":"6.5"},{"seq":223817,"id":"CVE-2024-37371","ts":1792238447475,"field":"severity","old":"critical","new":"medium"}]}