← Database

CVE-2021-37750

MEDIUM CVSS: 6.5 Published: 2021-08-23 Modified: 2026-06-17

Description

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Affected Platforms

Starwindsoftware Starwind Virtual SanFedoraproject FedoraDebian Debian LinuxMit Kerberos 5Oracle Communications Cloud Native Core Network Slice Selection Function

Weakness Type

CWE-476

References