CVE-2024-26462: Medium severity kerberos vulnerability
Published Feb 26, 2024
·Updated
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
Affected Software
13 affected componentsFixes available
debian/krb5<=1.20.1-2+deb12u2
1.18.3-6+deb11u51.18.3-6+deb11u61.21.3-4
MIT Kerberos 5=1.21.2
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Cloud Volumes Ontap Mediator
NetApp Management Services For Element Software And Netapp Hci
NetApp ONTAP Select Deploy administration utility
All of the following
NetApp H610c Firmware
NetApp H610c
All of the following
NetApp H610s Firmware
NetApp H610s
All of the following
NetApp H615c Firmware
NetApp H615c
IBM Concert Software<=1.0.0-1.1.0
Event History
Feb 26, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Feb 28, 2024
Data Sourced
via Red Hat·09:16 PM
DescriptionSeverityAffected Software
Mar 3, 2025
Data Sourced
via Launchpad·06:27 PM
Description
Mar 7, 2025
Data Sourced
via Ubuntu·06:27 PM
RemedyDescriptionSeverityAffected Software
Aug 18, 2025
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-26462?
CVE-2024-26462 is classified as a high-severity memory leak vulnerability in Kerberos 5 version 1.21.2.
2
How do I fix CVE-2024-26462?
To address CVE-2024-26462, upgrade Kerberos 5 to a version that is not affected by this vulnerability.
3
What are the potential impacts of CVE-2024-26462?
The memory leak in CVE-2024-26462 can lead to increased memory consumption and potentially affect the performance of affected systems.
4
Which software versions are affected by CVE-2024-26462?
CVE-2024-26462 affects Kerberos 5 version 1.21.2 and specific versions of IBM Storage Defender - Resiliency Service up to 2.0.9.
5
Is there a workaround for CVE-2024-26462?
Currently, the best workaround for CVE-2024-26462 is to ensure that any impacted systems are monitored for increased memory usage until a patch can be applied.