--- id: CVE-2024-37371 title: 'krb5: GSS message token handling (CVE-2024-37371)' summary: >- A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the toke… severity: medium cvss: 6.5 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H' cvssSource: vendor cwe: CWE-125 vendor: Red Hat product: Red Hat Enterprise Linux AppStream (v. 9) affected: - ansible_automation_platform 2 - enterprise_linux 6 - enterprise_linux_server_aus_v_7_7 - enterprise_linux_server_v_7_els - 9base_service_interconnect_1_4 - service_interconnect 1 - enterprise_linux_appstream_v_8 - enterprise_linux_appstream_e4s_v_9_0 - enterprise_linux_appstream_eus_v_9_2 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_aus_v_8_2 - enterprise_linux_baseos_aus_v_8_4 - enterprise_linux_baseos_e4s_v_8_4 - enterprise_linux_baseos_tus_v_8_4 - enterprise_linux_baseos_aus_v_8_6 - enterprise_linux_baseos_e4s_v_8_6 - enterprise_linux_baseos_tus_v_8_6 - enterprise_linux_baseos_eus_v_8_8 - enterprise_linux_baseos_e4s_v_9_0 - enterprise_linux_baseos_eus_v_9_2 - enterprise_linux_baseos_v_9 - codeready_linux_builder_v_9 patched: - enterprise_linux_server_aus_v_7_7 - enterprise_linux_server_v_7_els - 9base_service_interconnect_1_4 - service_interconnect 1 - enterprise_linux_appstream_v_8 - enterprise_linux_appstream_e4s_v_9_0 - enterprise_linux_appstream_eus_v_9_2 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_aus_v_8_2 - enterprise_linux_baseos_aus_v_8_4 - enterprise_linux_baseos_e4s_v_8_4 - enterprise_linux_baseos_tus_v_8_4 - enterprise_linux_baseos_aus_v_8_6 - enterprise_linux_baseos_e4s_v_8_6 - enterprise_linux_baseos_tus_v_8_6 - enterprise_linux_baseos_eus_v_8_8 - enterprise_linux_baseos_e4s_v_9_0 - enterprise_linux_baseos_eus_v_9_2 - enterprise_linux_baseos_v_9 - codeready_linux_builder_v_9 published: '2024-06-27' updated: '2026-10-16' sourceUpdated: '2026-10-16T16:06:25+00:00' source: CSAF sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json' references: - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json - url: 'https://access.redhat.com/security/cve/CVE-2024-37371' - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2294676' - url: 'https://www.cve.org/CVERecord?id=CVE-2024-37371' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-37371' - url: 'https://web.mit.edu/kerberos/www/krb5-1.21/' - url: 'https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL' - url: 'https://access.redhat.com/errata/RHSA-2024:5316' - url: 'https://access.redhat.com/errata/RHSA-2024:5076' - url: 'https://access.redhat.com/errata/RHSA-2024:7213' - url: 'https://access.redhat.com/errata/RHSA-2024:10135' - url: 'https://access.redhat.com/errata/RHSA-2024:11109' - url: 'https://access.redhat.com/errata/RHSA-2024:7374' - url: 'https://access.redhat.com/errata/RHSA-2025:1673' - url: 'https://access.redhat.com/errata/RHSA-2024:5630' - url: 'https://access.redhat.com/errata/RHSA-2024:5643' - url: 'https://access.redhat.com/errata/RHSA-2024:6166' - url: 'https://access.redhat.com/errata/RHBA-2024:6585' - url: 'https://access.redhat.com/errata/RHSA-2025:1671' - url: 'https://access.redhat.com/errata/RHSA-2024:5312' - url: 'https://access.redhat.com/errata/RHSA-2024:5884' - url: 'https://access.redhat.com/errata/RHSA-2024:4734' - url: 'https://access.redhat.com/errata/RHSA-2024:5625' - url: 'https://access.redhat.com/errata/RHSA-2024:4743' - url: 'https://web.mit.edu/kerberos/www/advisories/' - url: >- https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef tags: - csaf - vex - red-hat - cve.org - score-dispute epss: 0.01863 epssPercentile: 0.79151 ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2024-07-09T15:31:33.769366Z' scores: vendor: 6.5 adp: 9.1 ingestedAt: '2026-10-15T04:46:37.322Z' --- ## Overview A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper handling of authentication tokens. ## Vendor advisories - **RHSA-2024:5316** · Red Hat · fixed in: Red Hat Enterprise Linux Server AUS (v. 7.7) · released 2024-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2024:5316) - **RHSA-2024:5076** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS) · released 2024-08-07 · [advisory](https://access.redhat.com/errata/RHSA-2024:5076) - **RHSA-2024:7213** · Red Hat · fixed in: 9Base-Service-Interconnect-1.4 · released 2024-09-26 · [advisory](https://access.redhat.com/errata/RHSA-2024:7213) - **RHSA-2024:10135** · Red Hat · fixed in: 9Base-Service-Interconnect-1.4 · released 2024-11-21 · [advisory](https://access.redhat.com/errata/RHSA-2024:10135) - **RHSA-2024:11109** · Red Hat · fixed in: Red Hat Service Interconnect 1 · released 2024-12-16 · [advisory](https://access.redhat.com/errata/RHSA-2024:11109) - **RHSA-2024:7374** · Red Hat · fixed in: Red Hat Service Interconnect 1 · released 2024-09-30 · [advisory](https://access.redhat.com/errata/RHSA-2024:7374) - **RHSA-2025:1673** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8) · released 2025-02-19 · [advisory](https://access.redhat.com/errata/RHSA-2025:1673) - **RHSA-2024:5630** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0) · released 2024-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2024:5630) - **RHSA-2024:5643** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.2), Red Hat Enterprise Linux BaseOS EUS (v.9.2) · released 2024-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2024:5643) - **RHSA-2024:6166** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9) · released 2024-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2024:6166) - **RHBA-2024:6585** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9) · released 2024-09-11 · [advisory](https://access.redhat.com/errata/RHBA-2024:6585) - **Red Hat VEX** · Moderate · affected: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Ansible Automation Platform 2 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-37371.json) **krb5: GSS message token handling** — rated Moderate by Red Hat. Released 2024-06-27, updated 2026-10-16. Affected: - Red Hat Ansible Automation Platform 2 - Red Hat Enterprise Linux 6 Fixed: - Red Hat Enterprise Linux Server AUS (v. 7.7) - Red Hat Enterprise Linux Server (v. 7 ELS) - 9Base-Service-Interconnect-1.4 - Red Hat Service Interconnect 1 - Red Hat Enterprise Linux AppStream (v. 8) - Red Hat Enterprise Linux AppStream E4S (v.9.0) - Red Hat Enterprise Linux AppStream EUS (v.9.2) - Red Hat Enterprise Linux AppStream (v. 9) - Red Hat Enterprise Linux BaseOS (v. 8) - Red Hat Enterprise Linux BaseOS AUS (v. 8.2) - Red Hat Enterprise Linux BaseOS AUS (v.8.4) - Red Hat Enterprise Linux BaseOS E4S (v.8.4) - Red Hat Enterprise Linux BaseOS TUS (v.8.4) - Red Hat Enterprise Linux BaseOS AUS (v.8.6) - Red Hat Enterprise Linux BaseOS E4S (v.8.6) - Red Hat Enterprise Linux BaseOS TUS (v.8.6) - Red Hat Enterprise Linux BaseOS EUS (v.8.8) - Red Hat Enterprise Linux BaseOS E4S (v.9.0) - Red Hat Enterprise Linux BaseOS EUS (v.9.2) - Red Hat Enterprise Linux BaseOS (v. 9) - Red Hat CodeReady Linux Builder (v. 9) No fix planned: - Red Hat Enterprise Linux 6 - Red Hat Ansible Automation Platform 2 Not affected: - Red Hat Enterprise Linux BaseOS E4S (v.8.6) - Red Hat Ansible Automation Platform 2 - Red Hat Enterprise Linux 10 - Red Hat Enterprise Linux 6 ## Remediation For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:5316 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:5076 Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:7213 Workarounds / mitigations: - Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.