Threats Tagged 'cve-2026-11850'

This update includes the following RPMs: krb5: * krb5-devel-1.22.2-8.hum1 (aarch64, x86_64) * krb5-libs-1.22.2-8.hum1 (aarch64, x86_64) * krb5-pkinit-1.22.2-8.hum1 (aarch64, x86_64) * krb5-server-1.22.2-8.hum1 (aarch64, x86_64) * krb5-server-ldap-1.22.2-8.hum1 (aarch64, x86_64) * krb5-tests-1.22.2-8.hum1 (aarch64, x86_64) * krb5-workstation-1.22.2-8.hum1 (aarch64, x86_64) * krb5-xrealmauthz-1.22.2-8.hum1 (aarch64, x86_64) * libkadm5-1.22.2-8.hum1 (aarch64, x86_64) * krb5-1.22.2-8.hum1.src (src) Security Fix(es): krb5: * CVE-2026-11850

CVE-2026-11850 is an integer underflow vulnerability in the MIT krb5 LDAP KDB plugin used by Red Hat Hardened Images and Ubuntu Kerberos packages. The flaw occurs in the berval2tl_data() function when it subtracts 2 from a length value without checking if the length is at least 2, causing a wraparound and a large heap out-of-bounds read. This can lead to denial of service (crash) when the KDC or kadmind reads principal data from a malicious or compromised LDAP backend. Exploitation requires write access to the LDAP backend used as the Kerberos database. File-based KDB backends are not affected. Red Hat rates this issue as moderate impact, and Ubuntu has released fixed package versions. No known exploits are reported in the wild.