CVE-2023-39975

Summary

CVE-2023-39975 is a vulnerability affecting the MIT Kerberos 5 (krb5) software version 1.21 and below. This issue involves a double free error in the kdc/do_tgs_req.c file. When an authenticated user triggers an authorization-data handling failure, incorrect data is copied from one ticket to another, leading to a potential security vulnerability. Attackers could exploit this flaw to execute arbitrary code or gain unauthorized access to sensitive information. System administrators are urged to update to the latest version of MIT Kerberos to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.