ZeroDay Findings
Sign inSign up

Findings

CVE-2021-37750

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inn…

Published Aug 23, 2021 · updated Oct 14, 2026 · mit kerberos 5

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 23, 2021 · NIST NVD

    Detected

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

  2. Oct 14, 2026 · NIST NVD

    Updated

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Affected

  • cpe debian/debian linux9.0
  • cpe fedoraproject/fedora33
  • cpe mit/kerberos 5version unspecified
  • cpe oracle/communications cloud native core network slice selection function22.1.0
  • cpe starwindsoftware/starwind virtual sanv8r13

Sources

  • CVE.orgCVE-2021-37750

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2021-37750

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

    nvd.nist.gov

References