critical
CVE-2024-37371
krb5: GSS message token handling
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, CBL-Mariner, Julia, Photon OS. Rated lower by AlmaLinux (high), Oracle (high), Rocky Linux (high), Red Hat (medium), Amazon (medium), Ubuntu (medium).
Description
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | krb5 | 0:1.21.3-1.azl3 |
| CBL-Mariner 2.0 | krb5 | 0:1.19.4-3.cm2 |
| julia::Julia Ecosystem Security Advisories | Kerberos_krb5_jll | 1.21.3+0 |
| Photon OS 3.0 | krb5 | 1.17-7.ph3 |
| Photon OS 4.0 | krb5, krb5-devel, krb5-lang | 1.17-12.ph4 |
| Photon OS 5.0 | krb5, krb5-devel, krb5-doc and 1 more | 1.20.2-4.ph5 |
| alma 8 | krb5-devel, krb5-libs, krb5-pkinit and 15 more | 1.18.2-29.el8_10 and 4 more |
| alma 9 | krb5-devel, krb5-libs, krb5-pkinit and 11 more | 1.21.1-2.el9_4 and 1 more |
| alpine 3.17 | krb5 | 1.20.2-r1 |
| alpine 3.18 | krb5 | 1.20.2-r1 |
| alpine 3.19 | krb5 | 1.20.3-r0 |
| alpine 3.20 | krb5 | 1.20.3-r0 |
Show all 187 entries from 47 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | krb5 | 0:1.21.3-1.azl3 |
| CBL-Mariner 2.0 | krb5 | 0:1.19.4-3.cm2 |
| julia::Julia Ecosystem Security Advisories | Kerberos_krb5_jll | 1.21.3+0 |
| Photon OS 3.0 | krb5 | 1.17-7.ph3 |
| Photon OS 4.0 | krb5 | 1.17-12.ph4 |
| Photon OS 4.0 | krb5-devel | 1.17-12.ph4 |
| Photon OS 4.0 | krb5-lang | 1.17-12.ph4 |
| Photon OS 5.0 | krb5 | 1.20.2-4.ph5 |
| Photon OS 5.0 | krb5-devel | 1.20.2-4.ph5 |
| Photon OS 5.0 | krb5-doc | 1.20.2-4.ph5 |
| Photon OS 5.0 | krb5-lang | 1.20.2-4.ph5 |
| alma 8 | krb5-devel | 1.18.2-29.el8_10 |
| alma 8 | krb5-libs | 1.18.2-29.el8_10 |
| alma 8 | krb5-pkinit | 1.18.2-29.el8_10 |
| alma 8 | krb5-server | 1.18.2-29.el8_10 |
| alma 8 | krb5-server-ldap | 1.18.2-29.el8_10 |
| alma 8 | krb5-workstation | 1.18.2-29.el8_10 |
| alma 8 | libkadm5 | 1.18.2-29.el8_10 |
| alma 8 | mysql:8.0::mecab | 0.996-2.module_el8.6.0+3340+d764b636 |
| alma 8 | mysql:8.0::mecab-devel | 0.996-2.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mecab-ipadic | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mecab-ipadic-EUCJP | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-common | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-devel | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-errmsg | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-libs | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-server | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 8 | mysql:8.0::mysql-test | 8.0.41-1.module_el8.10.0+3965+b415b607 |
| alma 9 | krb5-devel | 1.21.1-2.el9_4 |
| alma 9 | krb5-libs | 1.21.1-2.el9_4 |
| alma 9 | krb5-pkinit | 1.21.1-2.el9_4 |
| alma 9 | krb5-server | 1.21.1-2.el9_4 |
| alma 9 | krb5-server-ldap | 1.21.1-2.el9_4 |
| alma 9 | krb5-workstation | 1.21.1-2.el9_4 |
| alma 9 | libkadm5 | 1.21.1-2.el9_4 |
| alma 9 | mysql | 8.0.41-2.el9_5 |
| alma 9 | mysql-common | 8.0.41-2.el9_5 |
| alma 9 | mysql-devel | 8.0.41-2.el9_5 |
| alma 9 | mysql-errmsg | 8.0.41-2.el9_5 |
| alma 9 | mysql-libs | 8.0.41-2.el9_5 |
| alma 9 | mysql-server | 8.0.41-2.el9_5 |
| alma 9 | mysql-test | 8.0.41-2.el9_5 |
| alpine 3.17 | krb5 | 1.20.2-r1 |
| alpine 3.18 | krb5 | 1.20.2-r1 |
| alpine 3.19 | krb5 | 1.20.3-r0 |
| alpine 3.20 | krb5 | 1.20.3-r0 |
| alpine 3.21 | krb5 | 1.20.3-r0 |
| alpine 3.22 | krb5 | 1.20.3-r0 |
| alpine 3.23 | krb5 | 1.20.3-r0 |
| alpine 3.24 | krb5 | 1.20.3-r0 |
| alpine edge | krb5 | 1.20.3-r0 |
| amazon linux 2 | krb5-debuginfo | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-devel | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-libs | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-pkinit | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-server | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-server-ldap | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | krb5-workstation | 1.15.1-55.amzn2.2.8 |
| amazon linux 2 | libkadm5 | 1.15.1-55.amzn2.2.8 |
| amazon linux 2023 | krb5-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-debugsource | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-devel | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-libs | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-libs-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-pkinit | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-pkinit-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-server | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-server-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-server-ldap | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-server-ldap-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-workstation | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | krb5-workstation-debuginfo | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | libkadm5 | 1.21.3-1.amzn2023.0.1 |
| amazon linux 2023 | libkadm5-debuginfo | 1.21.3-1.amzn2023.0.1 |
| debian 11 | krb5 | 1.18.3-6+deb11u5 |
| debian 12 | krb5 | 1.20.1-2+deb12u2 |
| debian 13 | krb5 | 1.21.3-1 |
| debian 14 | krb5 | 1.21.3-1 |
| echo | krb5 | 1.20.1-2+deb12u2 |
| Oracle Linux 7 | krb5-devel | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | krb5-libs | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | krb5-pkinit | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | krb5-server | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | krb5-server-ldap | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | krb5-workstation | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 7 | libkadm5 | 1.15.1-55.0.3.el7_9 |
| Oracle Linux 8 | krb5-devel | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | krb5-libs | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | krb5-pkinit | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | krb5-server | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | krb5-server-ldap | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | krb5-workstation | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | libkadm5 | 1.18.2-29.0.1.el8_10 |
| Oracle Linux 8 | mecab | 0.996-2.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mecab-devel | 0.996-2.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mecab-ipadic | 2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mecab-ipadic-EUCJP | 2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-common | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-devel | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-errmsg | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-libs | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-server | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 8 | mysql-test | 8.0.41-1.module+el8.10.0+90521+d5cc5c65 |
| Oracle Linux 9 | krb5-devel | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | krb5-libs | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | krb5-pkinit | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | krb5-server | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | krb5-server-ldap | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | krb5-workstation | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | libkadm5 | 1.21.1-2.0.1.el9_4 |
| Oracle Linux 9 | mysql | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-common | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-devel | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-errmsg | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-libs | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-server | 8.0.41-2.el9_5 |
| Oracle Linux 9 | mysql-test | 8.0.41-2.el9_5 |
| rapidfort amazon linux 2023 | krb5-devel | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | krb5-libs | 0:1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | krb5-pkinit | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | krb5-server | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | krb5-server-ldap | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | krb5-workstation | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | libkadm5 | 1.21.3-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | rf-krb5-libs | 0:1.21.3-1.amzn2023.0.1 |
| rapidfort Oracle Linux 9 | krb5-devel | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | krb5-libs | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | krb5-pkinit | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | krb5-server | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | krb5-server-ldap | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | krb5-workstation | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | libkadm5 | 0:1.21.1-2.0.1.el9_4 |
| rapidfort Oracle Linux 9 | mysql | 0:8.0.41-2.el9_5 |
| rapidfort Oracle Linux 9 | mysql-common | 0:8.0.41-2.el9_5 |
| rapidfort Oracle Linux 9 | mysql-errmsg | 0:8.0.41-2.el9_5 |
| rapidfort Oracle Linux 9 | mysql-server | 0:8.0.41-2.el9_5 |
| rapidfort ubuntu 20.04 | krb5 | 0:1.20.1-6ubuntu2.1 |
| rapidfort ubuntu 20.04 | rf-krb5 | 0:1.20.1-6ubuntu2.1 |
| rapidfort ubuntu 22.04 | krb5 | 0:1.20.1-6ubuntu2.1 |
| rapidfort ubuntu 22.04 | rf-krb5 | 0:1.20.1-6ubuntu2.1 |
| rapidfort ubuntu 24.04 | krb5 | 0:1.20.1-6ubuntu2.1 |
| rapidfort ubuntu 24.04 | rf-krb5 | 0:1.20.1-6ubuntu2.1 |
| Red Hat | krb5 | no fix listed |
| Red Hat | krb5-devel | no fix listed |
| Red Hat | krb5-libs | no fix listed |
| Red Hat | krb5-pkinit-openssl | no fix listed |
| Red Hat | krb5-server | no fix listed |
| Red Hat | krb5-server-ldap | no fix listed |
| Red Hat | krb5-workstation | no fix listed |
| rocky 8 | krb5-devel | 1.18.2-29.el8_10 |
| rocky 8 | krb5-libs | 1.18.2-29.el8_10 |
| rocky 8 | krb5-pkinit | 1.18.2-29.el8_10 |
| rocky 8 | krb5-server | 1.18.2-29.el8_10 |
| rocky 8 | krb5-server-ldap | 1.18.2-29.el8_10 |
| rocky 8 | krb5-workstation | 1.18.2-29.el8_10 |
| rocky 8 | libkadm5 | 1.18.2-29.el8_10 |
| rocky 8 | mysql:8.0::mecab | 0.996-2.module+el8.10.0+1676+9b4b6e24 |
| rocky 8 | mysql:8.0::mecab-devel | 0.996-2.module+el8.10.0+1676+9b4b6e24 |
| rocky 8 | mysql:8.0::mecab-ipadic | 2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 |
| rocky 8 | mysql:8.0::mecab-ipadic-EUCJP | 2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 |
| rocky 8 | mysql:8.0::mysql | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-common | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-devel | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-errmsg | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-libs | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-server | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 8 | mysql:8.0::mysql-test | 8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 |
| rocky 9 | mysql | 8.0.41-2.el9_5 |
| rocky 9 | mysql-common | 8.0.41-2.el9_5 |
| rocky 9 | mysql-errmsg | 8.0.41-2.el9_5 |
| rocky 9 | mysql-server | 8.0.41-2.el9_5 |
| root.io alpine 3.18 | rootio-krb5 | 1.20.2-r1 |
| root.io debian 12 | rootio-krb5 | 1.20.1-2+deb12u2 |
| root.io debian 13 | rootio-krb5 | 1.21.3-1 |
| seal debian | krb5 | 1.18.3-6+deb11u6+sp999 |
| seal debian | seal-krb5 | 1.18.3-6+deb11u6+sp999 |
| seal Red Hat 8 | krb5 | 1.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999 |
| seal Red Hat 8 | seal-krb5 | 1.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999 |
| ubuntu 14.04-ESM | krb5 | 1.12+dfsg-2ubuntu5.4+esm5 |
| ubuntu 16.04-ESM | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm5 |
| ubuntu 18.04-ESM | krb5 | 1.16-2ubuntu0.4+esm2 |
| ubuntu 20.04 | krb5 | 1.17-6ubuntu4.6 |
| ubuntu 20.04-ESM | krb5 | 1.17-6ubuntu4.6 |
| ubuntu 22.04 | krb5 | 1.19.2-2ubuntu0.4 |
| ubuntu 24.04 | krb5 | 1.20.1-6ubuntu2.1 |
References
- https://access.redhat.com/errata/RHSA-2025:1671
- https://access.redhat.com/security/cve/CVE-2024-37371
- https://bugzilla.redhat.com/2294581
- https://bugzilla.redhat.com/2294676
- https://bugzilla.redhat.com/2301888
- https://bugzilla.redhat.com/2318857
- https://bugzilla.redhat.com/2318858
- https://bugzilla.redhat.com/2318870
All 164 references
- https://bugzilla.redhat.com/2318873
- https://bugzilla.redhat.com/2318874
- https://bugzilla.redhat.com/2318876
- https://bugzilla.redhat.com/2318882
- https://bugzilla.redhat.com/2318883
- https://bugzilla.redhat.com/2318884
- https://bugzilla.redhat.com/2318885
- https://bugzilla.redhat.com/2318886
- https://bugzilla.redhat.com/2318897
- https://bugzilla.redhat.com/2318900
- https://bugzilla.redhat.com/2318905
- https://bugzilla.redhat.com/2318914
- https://bugzilla.redhat.com/2318922
- https://bugzilla.redhat.com/2318923
- https://bugzilla.redhat.com/2318925
- https://bugzilla.redhat.com/2318926
- https://bugzilla.redhat.com/2318927
- https://bugzilla.redhat.com/2331191
- https://bugzilla.redhat.com/2339218
- https://bugzilla.redhat.com/2339220
- https://bugzilla.redhat.com/2339221
- https://bugzilla.redhat.com/2339226
- https://bugzilla.redhat.com/2339231
- https://bugzilla.redhat.com/2339236
- https://bugzilla.redhat.com/2339238
- https://bugzilla.redhat.com/2339243
- https://bugzilla.redhat.com/2339247
- https://bugzilla.redhat.com/2339252
- https://bugzilla.redhat.com/2339259
- https://bugzilla.redhat.com/2339266
- https://bugzilla.redhat.com/2339270
- https://bugzilla.redhat.com/2339271
- https://bugzilla.redhat.com/2339275
- https://bugzilla.redhat.com/2339277
- https://bugzilla.redhat.com/2339281
- https://bugzilla.redhat.com/2339284
- https://bugzilla.redhat.com/2339291
- https://bugzilla.redhat.com/2339293
- https://bugzilla.redhat.com/2339295
- https://bugzilla.redhat.com/2339299
- https://bugzilla.redhat.com/2339300
- https://bugzilla.redhat.com/2339304
- https://bugzilla.redhat.com/2339305
- https://bugzilla.redhat.com/show_bug.cgi?id=2294581
- https://bugzilla.redhat.com/show_bug.cgi?id=2294676
- https://bugzilla.redhat.com/show_bug.cgi?id=2301888
- https://bugzilla.redhat.com/show_bug.cgi?id=2318857
- https://bugzilla.redhat.com/show_bug.cgi?id=2318858
- https://bugzilla.redhat.com/show_bug.cgi?id=2318870
- https://bugzilla.redhat.com/show_bug.cgi?id=2318873
- https://bugzilla.redhat.com/show_bug.cgi?id=2318874
- https://bugzilla.redhat.com/show_bug.cgi?id=2318876
- https://bugzilla.redhat.com/show_bug.cgi?id=2318882
- https://bugzilla.redhat.com/show_bug.cgi?id=2318883
- https://bugzilla.redhat.com/show_bug.cgi?id=2318884
- https://bugzilla.redhat.com/show_bug.cgi?id=2318885
- https://bugzilla.redhat.com/show_bug.cgi?id=2318886
- https://bugzilla.redhat.com/show_bug.cgi?id=2318897
- https://bugzilla.redhat.com/show_bug.cgi?id=2318900
- https://bugzilla.redhat.com/show_bug.cgi?id=2318905
- https://bugzilla.redhat.com/show_bug.cgi?id=2318914
- https://bugzilla.redhat.com/show_bug.cgi?id=2318922
- https://bugzilla.redhat.com/show_bug.cgi?id=2318923
- https://bugzilla.redhat.com/show_bug.cgi?id=2318925
- https://bugzilla.redhat.com/show_bug.cgi?id=2318926
- https://bugzilla.redhat.com/show_bug.cgi?id=2318927
- https://bugzilla.redhat.com/show_bug.cgi?id=2331191
- https://bugzilla.redhat.com/show_bug.cgi?id=2339218
- https://bugzilla.redhat.com/show_bug.cgi?id=2339220
- https://bugzilla.redhat.com/show_bug.cgi?id=2339221
- https://bugzilla.redhat.com/show_bug.cgi?id=2339226
- https://bugzilla.redhat.com/show_bug.cgi?id=2339231
- https://bugzilla.redhat.com/show_bug.cgi?id=2339236
- https://bugzilla.redhat.com/show_bug.cgi?id=2339238
- https://bugzilla.redhat.com/show_bug.cgi?id=2339243
- https://bugzilla.redhat.com/show_bug.cgi?id=2339247
- https://bugzilla.redhat.com/show_bug.cgi?id=2339252
- https://bugzilla.redhat.com/show_bug.cgi?id=2339259
- https://bugzilla.redhat.com/show_bug.cgi?id=2339266
- https://bugzilla.redhat.com/show_bug.cgi?id=2339270
- https://bugzilla.redhat.com/show_bug.cgi?id=2339271
- https://bugzilla.redhat.com/show_bug.cgi?id=2339275
- https://bugzilla.redhat.com/show_bug.cgi?id=2339277
- https://bugzilla.redhat.com/show_bug.cgi?id=2339281
- https://bugzilla.redhat.com/show_bug.cgi?id=2339284
- https://bugzilla.redhat.com/show_bug.cgi?id=2339291
- https://bugzilla.redhat.com/show_bug.cgi?id=2339293
- https://bugzilla.redhat.com/show_bug.cgi?id=2339295
- https://bugzilla.redhat.com/show_bug.cgi?id=2339299
- https://bugzilla.redhat.com/show_bug.cgi?id=2339300
- https://bugzilla.redhat.com/show_bug.cgi?id=2339304
- https://bugzilla.redhat.com/show_bug.cgi?id=2339305
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21193
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21194
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21196
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21197
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21198
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21199
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21201
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21203
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21212
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21213
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21218
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21219
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21231
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21237
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21238
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21239
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21247
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21490
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21491
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21494
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21497
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21500
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21501
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21503
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21504
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21505
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21518
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21519
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21520
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21521
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21522
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21523
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21529
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21531
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21534
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21536
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21543
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21546
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21555
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21559
- https://errata.almalinux.org/9/ALSA-2025-1671.html
- https://errata.rockylinux.org/RLSA-2025:1671
- https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef
- https://linux.oracle.com/cve/CVE-2024-37371.html
- https://linux.oracle.com/errata/ELSA-2025-1673.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-37371
- https://security.netapp.com/advisory/ntap-20241108-0009/
- https://security.netapp.com/advisory/ntap-20250124-0010/
- https://ubuntu.com/security/notices/USN-6947-1
- https://web.mit.edu/kerberos/www/advisories/
- https://web.mit.edu/kerberos/www/krb5-1.21/
- https://www.cve.org/CVERecord?id=CVE-2024-37371
- https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL