USN-6467-1: Kerberos vulnerability
1 November 2023
Kerberos could be made to crash if it received specially crafted network traffic.
Releases
Packages
- krb5 - MIT Kerberos Network Authentication Protocol
Details
Robert Morris discovered that Kerberos did not properly handle memory
access when processing RPC data through kadmind, which could lead to the
freeing of uninitialized memory. An authenticated remote attacker could
possibly use this issue to cause kadmind to crash, resulting in a denial
of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
krb5-admin-server
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
krb5-kdc
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
krb5-kdc-ldap
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
krb5-otp
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
krb5-pkinit
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
krb5-user
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libgssapi-krb5-2
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libgssrpc4
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libk5crypto3
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkadm5clnt-mit11
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkadm5srv-mit11
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkdb5-9
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkrad0
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkrb5-3
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
-
libkrb5support0
-
1.16-2ubuntu0.4+esm1
Available with Ubuntu Pro
Ubuntu 16.04
-
krb5-admin-server
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
krb5-kdc
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
krb5-kdc-ldap
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
krb5-otp
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
krb5-pkinit
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
krb5-user
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libgssapi-krb5-2
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libgssrpc4
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libk5crypto3
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkadm5clnt-mit9
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkadm5srv-mit9
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkdb5-8
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkrad0
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkrb5-3
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
-
libkrb5support0
-
1.13.2+dfsg-5ubuntu2.2+esm4
Available with Ubuntu Pro
Ubuntu 14.04
-
krb5-admin-server
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
krb5-kdc
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
krb5-kdc-ldap
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
krb5-otp
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
krb5-pkinit
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
krb5-user
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libgssapi-krb5-2
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libgssrpc4
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libk5crypto3
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkadm5clnt-mit9
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkadm5srv-mit8
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkadm5srv-mit9
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkdb5-7
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkrad0
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkrb5-3
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
-
libkrb5support0
-
1.12+dfsg-2ubuntu5.4+esm4
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6467-2: libkadm5clnt-mit11, krb5-admin-server, libkrb5-dev, libk5crypto3, krb5-gss-samples, krb5-locales, krb5-kpropd, libkadm5clnt-mit12, libkrb5support0, libgssapi-krb5-2, libkdb5-9, krb5-user, libkrb5-3, libkrad0, libkrad-dev, krb5-otp, libkdb5-10, libgssrpc4, krb5-kdc-ldap, krb5-k5tls, krb5-multidev, krb5-kdc, krb5-doc, libkadm5srv-mit12, libkadm5srv-mit11, krb5-pkinit, krb5