Mit vulnerabilities
We track 8 vulnerabilities in Mit products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
Latest Mit vulnerabilities
- 7.5 High severity
Kerberos 5: Integer Underflow (Wrap or Wraparound)
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can
- 7.5 High severity
Kerberos 5: NULL Pointer Dereference
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the p
- 7.1 High severity
Kerberos 5: Integer Overflow or Wraparound
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
- 9.1 Critical severity
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Read
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
- 7.5 High severity
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Insufficient Verification of Data Authenticity
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.
- 8.8 High severity
Kerberos 5: Double Free
kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
- 8.8 High severity
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Integer Overflow or Wraparound
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffe
- 7.5 High severity
Inetutils: NULL Pointer Dereference
telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available thro