CVE-2007-5972: Mit Kerberos 5

High severity, CVSS 9.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.

Affected products

• Mit Kerberos 5: version 1.5 only

Published 2007-12-06. Last modified 2026-06-16.