PT-2026-34693

Published

2026-04-13

·

Updated

2026-04-13

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2026-94
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com