CVE-2024-26461

Published: Feb 29, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

Affected (9)

Products: Mit: Kerberos 5 · Netapp: Active Iq Unified Manager, Cloud Volumes Ontap Mediator, Management Services For Element Software And Netapp Hci, Ontap 9, Ontap Select Deploy Administration Utility, H610c Firmware, H610s Firmware, H615c Firmware

1 product

8 products

Active Iq Unified Manager

Cloud Volumes Ontap Mediator

Management Services For Element Software And Netapp Hci

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Version 1.21.2

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Volumes Ontap Mediator	All versions
Netapp Management Services For Element Software And Netapp Hci	All versions
Netapp Ontap 9	All versions
Netapp Ontap Select Deploy Administration Utility	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610c Firmware	All versions

Running on/with	Platform Versions
Netapp H610c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610s Firmware	All versions

Running on/with	Platform Versions
Netapp H610s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H615c Firmware	All versions

Running on/with	Platform Versions
Netapp H615c	All versions

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md

Source: cve@mitre.org

Exploit

https://security.netapp.com/advisory/ntap-20240415-0011/

Source: cve@mitre.org

Third Party Advisory

https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://security.netapp.com/advisory/ntap-20240415-0011/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.