CVE-2015-8631: Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4...

Security readout for executives and security teams

This flaw can let an authenticated remote Kerberos administrative user make kadmind consume memory until service availability is affected. It targets identity administration infrastructure, not data theft. Business urgency is highest where Kerberos administration is exposed beyond tightly controlled admin hosts or where old krb5 packages remain in use. Exposure is likely limited to environments running affected MIT krb5 kadmind versions, especially Kerberos KDC/admin servers where remote authenticated administrative requests can reach kadmind. Distribution packages may be patched through backports, so version strings alone may be insufficient without vendor advisory mapping. Treat as a targeted availability risk to identity administration. Prioritize patching on Kerberos admin servers and enforce restricted administrative access. It is not supported by the bundle as actively exploited or unauthenticated. Mitigation focus: Apply vendor krb5 security updates for CVE-2015-8631.; Upgrade MIT krb5 to 1.13.4, 1.14.1, or later where applicable.; Restrict kadmind access to trusted administrative networks and hosts..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.