CVE-2024-26458: Mit Kerberos 5

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

Affected products

  • Mit Kerberos 5: version 1.21.2 only
  • Netapp Active Iq Unified Manager: affected versions not specified
  • Netapp Cloud Volumes Ontap Mediator: affected versions not specified
  • Netapp h610c Firmware: affected versions not specified
  • Netapp h610s Firmware: affected versions not specified
  • Netapp h615c Firmware: affected versions not specified
  • Netapp Management Services For Element Software And Netapp Hci: affected versions not specified
  • Netapp Ontap 9: affected versions not specified
  • Netapp Ontap Select Deploy Administration Utility: affected versions not specified

Published 2024-02-29. Last modified 2026-06-17.