CVE-2026-42483
CriticalSummary
In version 7.1.2 of hashcat, there is a heap-based buffer overflow in the Kerberos hash parser, allowing an attacker to cause a denial of service or potentially execute arbitrary code via a crafted Kerberos hash file.
Risk Assessment
The organization may be exposed to attacks leading to denial of service or unauthorized code execution, potentially resulting in data loss or system access.
Recommendation
It is recommended to update hashcat to the latest version to mitigate this vulnerability and conduct a security audit of systems using Kerberos.
Original NVD description (English source)
A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The issue affects module_hash_decode in multiple Kerberos-related modules because account_info_len is calculated from untrusted delimiter positions without upper-bound validation before memcpy copies the data into a fixed-size account_info buffer.