← Back

CVE-2024-26458

nvd nist
Published: Feb 29, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

Affected (9)

Mit
1 product
Kerberos 5
Netapp
8 products
Active Iq Unified Manager
Cloud Volumes Ontap Mediator
Management Services For Element Software And Netapp Hci
Ontap 9
Ontap Select Deploy Administration Utility
H610c Firmware
H610s Firmware
H615c Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Kerberos 5
Version 1.21.2
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
Cloud Volumes Ontap Mediator
All versions
Management Services For Element Software And Netapp Hci
All versions
Ontap 9
All versions
Ontap Select Deploy Administration Utility
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610c Firmware
All versions
Running on/withPlatform Versions
Netapp
H610c
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H615c Firmware
All versions
Running on/withPlatform Versions
Netapp
H615c
All versions

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (4)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.