CVE-2026-25506 — Out-of-bounds Write in Opensuse Munge

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	munge	< munge 0.5.15-2+deb12u1 (bookworm)	munge 0.5.15-2+deb12u1 (bookworm)
dun	munge	—	—
opensuse	munge	>= 0 < 0.5.14-4+deb11u1	0.5.14-4+deb11u1
opensuse	munge	>= 0 < 0.5.15-2+deb12u1	0.5.15-2+deb12u1
opensuse	munge	>= 0 < 0.5.16-1.1~deb13u1	0.5.16-1.1~deb13u1
opensuse	munge	>= 0 < 0.5.16-1.1	0.5.16-1.1
opensuse	munge	>= 0.5 < 0.5.18	0.5.18

Ubuntu

MUNGE vulnerability

vendor_ubuntu·2026-02-12

CVE-2026-25506 MUNGE vulnerability Title: MUNGE vulnerability Summary: MUNGE could be made to crash or run programs as your login if it opened a specially crafted file. Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue to forge MUNGE credentials, leading to arbitrary code execution. Instructions: In general, a standard system update will make all the necessary changes.

Red Hat

MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

vendor_redhat·2026-02-10·CVSS 7.7

CVE-2026-25506 [HIGH] CWE-120 MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18. A b

Debian

CVE-2026-25506: munge - MUNGE is an authentication service for creating and validating user credentials....

vendor_debian·2026·CVSS 7.7

CVE-2026-25506 [HIGH] CVE-2026-25506: munge - MUNGE is an authentication service for creating and validating user credentials.... MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18. Scope: local bookworm: resolved (fixed in 0.5.15-2+deb12u1) bullseye: resolved (fixed in 0.5.14-4+deb11

OSV

CVE-2026-25506: MUNGE is an authentication service for creating and validating user credentials

osv·2026-02-10·CVSS 7.8

CVE-2026-25506 [HIGH] CVE-2026-25506: MUNGE is an authentication service for creating and validating user credentials MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key material, the attacker could forge arbitrary MUNGE credentials to impersonate any user (including root) to services that rely on MUNGE for authentication. The vulnerability allows a buffer overflow by sending a crafted message with an oversized address length field, corrupting munged's internal state and enabling extraction of the MAC subkey used for credential verification. This vulnerability is fixed in 0.5.18.

CVE-2026-25506: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability…

Affected

CVSS provenance