Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian 11: DLA-4065-1 critical: krb5 attacker risk results in crash

debian lts
Calendar Grey February 23, 2025
Dist Debian Esm H88
Ubuntu Security Notice USN-4901-1 addresses vulnerabilities in OpenSSL, which may allow a remote attacker to execute arbitrary code, resulting in severe system instability.
MIT krb5 a popular implementation of Kerberos 5 protocol was affected by a vulnerability
Topics%20covered

Topics Covered

security advisory debian krb5 authenticated attack process crash

Summary

An authenticated attacker can cause kadmind to write beyond
the end of the mapped region for the iprop log file, likely causing a
process crash.

For Debian 11 bullseye, this problem has been fixed in version
1.18.3-6+deb11u6.

We recommend that you upgrade your krb5 packages.

For the detailed security status of krb5 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/krb5

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: krb5
Version: 1.18.3-6+deb11u6
CVE ID: CVE-2025-24528
Debian Bug: 1094730

Topics%20covered

Topics Covered

security advisory debian krb5 authenticated attack process crash

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here