krb5-main vulnerabilities

CVEs whose affected-version data names the krb5-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-11850Medium· 5.0

4mo ago

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv…

▾ SunlitRed Hat · krb5-mainEPSS 0.27%via CVEORG