CVE-2026-107364

{}

{}

{}

{"bugzilla": {"description": "krb5: Unauthenticated KDC DoS based on ASN.1 decoder read overrun", "id": "2569161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2569161"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In all released versions of MIT krb5, an unauthenticated attacker can cause a KDC process to perform a large read overrun, likely causing the process to terminate."], "mitigation": {"lang": "en:us", "value": "Restrict network access to the Kerberos Key Distribution Center (KDC) ports (88 UDP/TCP) to trusted client networks, or disable the KDC service on systems not operating as identity controllers.\nTo stop and disable the KDC service on systems where it is not required:\nsystemctl stop krb5kdc\nsystemctl disable krb5kdc\nTo restrict network access to an authorized client subnet (e.g., 192.168.1.0/24) using firewalld:\nfirewall-cmd --permanent --zone=public --remove-service=kerberos\nfirewall-cmd --permanent --zone=public --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"kerberos\" accept'\nfirewall-cmd --reload\nCaveat: Disabling the service or blocking network traffic prevents unlisted clients from obtaining Kerberos tickets, which will disrupt authentication and single sign-on services in the realm.\nWarning: Reloading firewall rules or stopping the KDC service will immediately terminate active Kerberos connections and fail in-flight ticket requests."}, "name": "CVE-2026-107364", "package_state": [{"cpe": "cpe:/a:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:rhel_els:6", "fix_state": "Out of support scope", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:rhel_els:7", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-10T08:33:03Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-107364\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-107364"], "statement": "This vulnerability is rated as Important severity because an unauthenticated remote network attacker can crash the Kerberos Key Distribution Center (KDC) daemon, leading to an immediate denial of service across the entire authentication realm. In Red Hat Enterprise Linux and related offerings, the KDC service is not enabled by default on standard deployments and is typically confined to dedicated identity management servers (such as FreeIPA or standalone KDCs). Standard endpoints and systems operating solely as Kerberos clients do not process incoming KDC requests and are not directly vulnerable to this service interruption.", "threat_severity": "Important"}

{"created": "2026-11-11T17:00:08.301719+00:00", "updated": "2026-11-13T01:45:12.794230+00:00", "vendors": []}