Red Hat Enterprise Linux 1.5.2 AUTH_GSSAPI handler svc_auth_gssapi.c memory allocation

Summaryinfo

A vulnerability, which was classified as critical, was found in Red Hat Enterprise Linux 1.5.2. This affects an unknown function of the file lib/rpc/svc_auth_gssapi.c of the component AUTH_GSSAPI handler. Such manipulation leads to memory allocation. This vulnerability is uniquely identified as CVE-2026-112323. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Red Hat Enterprise Linux 1.5.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file lib/rpc/svc_auth_gssapi.c of the component AUTH_GSSAPI handler. The manipulation with an unknown input leads to a memory allocation vulnerability. Using CWE to declare the problem leads to CWE-789. The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. Impacted is availability. CVE summarizes:

The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed.

The advisory is shared for download at access.redhat.com. This vulnerability is handled as CVE-2026-112323 since 10/19/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 11/09/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux

Version

• 1.5.2

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion