CVE-2024-37371

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 18, 2026

Last Seen

February 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Vulnerabilities in MIT Kerberos 5 Identified and Published33.5

Two vulnerabilities in MIT Kerberos 5 (krb5) before version 1.21.3 have been identified. CVE-2024-37370 allows an attacker to modify the Extra Count field of a GSS krb5 wrap token, while CVE-2024-37371 enables invalid memory reads during GSS message token handling. Both vulnerabilities were publishe...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Multiple Vulnerabilities in MIT Kerberos 5 Identified and Published

Feb 18·2 sources

Related Entities

Zero-day Exploit MIT Kerberos 5

CVE-2024-37371

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Multiple Vulnerabilities in MIT Kerberos 5 Identified and Published

Related Articles (1)

CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3 an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.

Related Entities