CVE-2024-26461: Mit Kerberos 5

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

Affected products

• Mit Kerberos 5: version 1.21.2 only
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Volumes Ontap Mediator: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp Management Services For Element Software And Netapp Hci: affected versions not specified
• Netapp Ontap 9: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified

Published 2024-02-29. Last modified 2026-06-17.