CVE Feed

    Dashboard / CVE / CVE-2026-112319

    CVE-2026-112319

    The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding.

    Published:Nov 9, 2026
    Last Modified:Nov 9, 2026
    EPS:Nov 9, 2026
    EPSS Score:
    CVSS Score:6.5

    Affected Products

    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Hummingbird
    Vendor
    Redhat
    Product
    Rhel Els

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-122056 (CVSS 5.9) — A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Exten…
    CVE-2026-112314 (CVSS 7.5) — clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between…
    CVE-2026-112321 (CVSS 7.5) — The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded argume…
    CVE-2026-112320 (CVSS 7.5) — The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentic…
    CVE-2026-112318 (CVSS 6.5) — The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not rejec…
    CVE-2026-112316 (CVSS 6.5) — xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded da…
    CVE-2026-112317 (CVSS 5.3) — krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypte…
    CVE-2026-112315 (CVSS 5.3) — The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do…
    CVE-2026-119079 (CVSS 7.5) — decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the dec…
    CVE-2026-112323 (CVSS 7.5) — The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remot…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-112319 — Redhat (Medium 6.5) | CVE-DB