There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read
    if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in
    /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to
    terminate in parse_message. (CVE-2026-40356)

  - In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls
    gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An
    unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.
    (CVE-2026-40355)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded     arguments on certain error paths, which allows remote attackers to cause a denial of service (memory     exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures.
    (CVE-2026-112321)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of krb5 installed on the remote host is prior to 1.22.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-313-01 advisory.

    New krb5 packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the krb5 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8dc02503-dd51-11f1-a654-f8b46a88f42c advisory.

    The MIT KRB5 Project reports:
    An authenticated attacker can bypass authentication indicator                  enforcement by requesting a service ticket with fake CAMMAC                  authorization data.  Updating to the 1.22.3 release on the KDC                  is sufficient to prevent this attack.
    An authenticated attacker can bypass an application server's                  PAC authorization data checks by requesting a service ticket                  with a fake PAC.  Updating to the 1.22.3 release on either the                  KDC or the affected application server will prevent this                  attack.
    An authenticated attacker with administrative privileges can                  bypass the lockdown_keys attribute by using the password change                  protocol instead of the kadmin protocol to modify a principal's                  keys.
    The KDC, kadmind, and GSS-API application servers are all                  vulnerable to denial of service attacks by unauthenticated                  attackers.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
478901	Alpine: krb5: security update to 1.22.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/11/10	2026/11/11	high
478901	Alpine: krb5: security update to 1.22.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/11/10	2026/11/11	high
377851	Linux Distros Unpatched Vulnerability : CVE-2026-112321	Nessus	Misc.	2026/11/9	2026/11/9	high
377879	Slackware Linux 15.0 / current krb5 Multiple Vulnerabilities (SSA:2026-313-01)	Nessus	Slackware Local Security Checks	2026/11/9	2026/11/9	high
378786	FreeBSD : krb5 -- MIT krb5 Security Advisory 2026-001 (8dc02503-dd51-11f1-a654-f8b46a88f42c)	Nessus	FreeBSD Local Security Checks	2026/11/11	2026/11/11	high

検出

プラグインの検索

high

high

high

high

high