There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read
    if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in
    /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to
    terminate in parse_message. (CVE-2026-40356)

  - In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls
    gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An
    unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.
    (CVE-2026-40355)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which     allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU     consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR     decoding. (CVE-2026-112319)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of krb5 installed on the remote host is prior to 1.22.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-313-01 advisory.

    New krb5 packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the krb5 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8dc02503-dd51-11f1-a654-f8b46a88f42c advisory.

    The MIT KRB5 Project reports:
    An authenticated attacker can bypass authentication indicator                  enforcement by requesting a service ticket with fake CAMMAC                  authorization data.  Updating to the 1.22.3 release on the KDC                  is sufficient to prevent this attack.
    An authenticated attacker can bypass an application server's                  PAC authorization data checks by requesting a service ticket                  with a fake PAC.  Updating to the 1.22.3 release on either the                  KDC or the affected application server will prevent this                  attack.
    An authenticated attacker with administrative privileges can                  bypass the lockdown_keys attribute by using the password change                  protocol instead of the kadmin protocol to modify a principal's                  keys.
    The KDC, kadmind, and GSS-API application servers are all                  vulnerable to denial of service attacks by unauthenticated                  attackers.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
478901	Alpine: krb5: security update to 1.22.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	11/10/2026	11/11/2026	high
478901	Alpine: krb5: security update to 1.22.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	11/10/2026	11/11/2026	high
377777	Linux Distros Unpatched Vulnerability : CVE-2026-112319	Nessus	Misc.	11/9/2026	11/10/2026	medium
377879	Slackware Linux 15.0 / current krb5 Multiple Vulnerabilities (SSA:2026-313-01)	Nessus	Slackware Local Security Checks	11/9/2026	11/9/2026	high
378786	FreeBSD : krb5 -- MIT krb5 Security Advisory 2026-001 (8dc02503-dd51-11f1-a654-f8b46a88f42c)	Nessus	FreeBSD Local Security Checks	11/11/2026	11/11/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high

high