MIT krb5
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107778 | ≤ 1.22.2 | MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() | HIGH 7.1 | 0.4 % | ||
| CVE-2026-107708 | ≤ 1.22.2 | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC | MEDIUM 6.9 | 0.5 % | ||
| CVE-2019-14844 | Fedora versions of krb5 from 1.16.1 to, including 1.17.x | A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending o | HIGH 7.5 | 4.4 % | ||
| CVE-2017-7562 | 1.16.1 | An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A | MEDIUM 6.5 | 3.2 % |