krb5: overflow when calculating ulog block size

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause     kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a     process crash and lead to a denial of service.(CVE-2025-24528)

Tenable has extracted the preceding description block directly from the EulerOS krb5 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:2722 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix:

      * CVE-2025-24528 krb5: overflow when calculating ulog block size


    Bug fix:

      * kdb5_util: fix DB entry flags on modification

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2722 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix:

    * CVE-2025-24528 krb5: overflow when calculating ulog block size

    Bug fix:

    * kdb5_util: fix DB entry flags on modification

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2722 advisory.

    - Prevent overflow when calculating ulog block size (CVE-2025-24528)       Resolves: RHEL-78248

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1352 advisory.

    [1.15.1-55.0.9]
    - Fixes CVE-2025-24528 , Prevent overflow when calculating ulog block size [Orabug: 37587301]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - krb5: overflow when calculating ulog block size (CVE-2025-24528)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7314-1 advisory.

    It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could     possibly use this issue to cause Kerberos to consume memory,leading to a denial of service.
    (CVE-2024-26458, CVE-2024-26461)

    It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could     possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. This issue     only affected Ubuntu 24.04 LTS. (CVE-2024-26462)

    It was discovered that the Kerberos kadmind daemon incorrectly handled log files when incremental     propagation was enabled. An authenticated attacker could use this issue to cause kadmind to crash,     resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-24528)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4065 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4065-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     February 23, 2025                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : krb5     Version        : 1.18.3-6+deb11u6     CVE ID         : CVE-2025-24528     Debian Bug     : 1094730

    MIT krb5 a popular implementation of Kerberos 5 protocol was     affected by a vulnerability.

    An authenticated attacker can cause kadmind to write beyond     the end of the mapped region for the iprop log file, likely causing a     process crash.

    For Debian 11 bullseye, this problem has been fixed in version     1.18.3-6+deb11u6.

    We recommend that you upgrade your krb5 packages.

    For the detailed security status of krb5 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/krb5

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-61b9344baf advisory.

    - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    - Support PKCS11 EC client certs in PKINIT
    - kdb5_util: fix DB entry flags on modification
    - Add ECDH support for PKINIT (RFC5349)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3e5228ee23 advisory.

    - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    - Support PKCS11 EC client certs in PKINIT
    - kdb5_util: fix DB entry flags on modification
    - Add ECDH support for PKINIT (RFC5349)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1352 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: overflow when calculating ulog block size (CVE-2025-24528)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0401-1 advisory.

    Security issue fixed:

    - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead     to process crash (bsc#1236619).

    Feature addition:

    - Add crypto-policies support; (jsc#PED-12018)

      * The default krb5.conf has been updated to include config         snippets in the krb5.conf.d directory, where crypto-policies         drops its.

    - Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018);

      * This key derivation function is used by AES256-CTS-HMAC-SHA1-96         and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active         directory. If these encryption types are allowed or not in         FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0351-1 advisory.

    - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead     to process crash (bsc#1236619).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234173	EulerOS 2.0 SP11 : krb5 (EulerOS-SA-2025-1362)	Nessus	Huawei Local Security Checks	medium
234160	EulerOS 2.0 SP11 : krb5 (EulerOS-SA-2025-1361)	Nessus	Huawei Local Security Checks	medium
232870	AlmaLinux 8 : krb5 (ALSA-2025:2722)	Nessus	Alma Linux Local Security Checks	medium
232772	RHEL 8 : krb5 (RHSA-2025:2722)	Nessus	Red Hat Local Security Checks	medium
232710	Oracle Linux 8 : krb5 (ELSA-2025-2722)	Nessus	Oracle Linux Local Security Checks	medium
232278	Oracle Linux 7 : krb5 (ELSA-2025-1352)	Nessus	Oracle Linux Local Security Checks	medium
230401	Linux Distros Unpatched Vulnerability : CVE-2025-24528	Nessus	Misc.	medium
217107	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Kerberos vulnerabilities (USN-7314-1)	Nessus	Ubuntu Local Security Checks	medium
216673	Debian dla-4065 : krb5-admin-server - security update	Nessus	Debian Local Security Checks	medium
216349	Fedora 40 : krb5 (2025-61b9344baf)	Nessus	Fedora Local Security Checks	medium
216258	Fedora 41 : krb5 (2025-3e5228ee23)	Nessus	Fedora Local Security Checks	medium
216209	RHEL 7 : krb5 (RHSA-2025:1352)	Nessus	Red Hat Local Security Checks	medium
216182	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : crypto-policies, krb5 (SUSE-SU-2025:0401-1)	Nessus	SuSE Local Security Checks	medium
215175	SUSE SLES12 Security Update : krb5 (SUSE-SU-2025:0351-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2025-24528

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium