CVE-2024-26458
Publication date 29 February 2024
Last updated 4 October 2024
Ubuntu priority
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
Read the notes from the security team
Why is this CVE negligible priority?
leak in unused function
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| krb5 | 24.10 oracular |
Vulnerable
|
| 24.04 LTS noble |
Vulnerable
|
|
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal |
Vulnerable
|
|
| 18.04 LTS bionic |
Vulnerable
|
|
| 16.04 LTS xenial |
Vulnerable
|
|
| 14.04 LTS trusty |
Vulnerable
|
Notes
mdeslaur
per upstream: "The pmap_rmt.c leak only affects pmap_rmtcall(), which is unused by the rest of the krb5 code base and likely unused by anyone else."