CVE-2021-37750

—

CVSS 3.1

6.5 medium

EPSS

2%p81

Published

Aug 23, 2021 (Aug 23, 2021)

Modified

Jun 17, 2026

Description

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Vendors: mit fedoraproject debian starwindsoftware oracle
Products: kerberos 5, fedora, debian linux, starwind virtual san, communications cloud native core network slice selection function
Weakness: CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.