Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
References
| Link | Resource |
|---|---|
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0011/ | Third Party Advisory |
| https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md | Exploit |
| https://security.netapp.com/advisory/ntap-20240415-0011/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
23 May 2025, 15:30
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:ontap_9:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:* cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* |
|
| First Time |
Netapp ontap 9
Netapp h610c Netapp h615c Firmware Mit Netapp active Iq Unified Manager Netapp h610c Firmware Netapp ontap Select Deploy Administration Utility Netapp management Services For Element Software And Netapp Hci Netapp h610s Firmware Netapp h610s Netapp h615c Netapp Mit kerberos 5 Netapp cloud Volumes Ontap Mediator |
|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md - Exploit | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0011/ - Third Party Advisory |
21 Nov 2024, 09:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md - | |
| References | () https://security.netapp.com/advisory/ntap-20240415-0011/ - |
14 Aug 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-770 |
14 May 2024, 15:09
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Feb 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:44
Updated : 2025-05-23 15:30
NVD link : CVE-2024-26461
Mitre link : CVE-2024-26461
CVE.ORG link : CVE-2024-26461
JSON object : View
Products Affected
netapp
- cloud_volumes_ontap_mediator
- h615c
- h610c_firmware
- active_iq_unified_manager
- h610c
- management_services_for_element_software_and_netapp_hci
- h610s_firmware
- h610s
- h615c_firmware
- ontap_9
- ontap_select_deploy_administration_utility
mit
- kerberos_5
CWE
CWE-770
Allocation of Resources Without Limits or Throttling