Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 14.04 LTS USN-2310-1 Critical Denial of Service in Kerberos

ubuntu
Calendar Grey August 11, 2014
Scroller Ubuntu
A series of security updates for Kerberos in Ubuntu mitigate denial of service threats and bolster the overall security framework.
Several security issues were fixed in Kerberos.

Summary

Several security issues were fixed in Kerberos.

Software Description:

- krb5: MIT Kerberos Network Authentication Protocol

Details:

It was discovered that Kerberos incorrectly handled certain crafted Draft 9

requests. A remote attacker could use this issue to cause the daemon to

crash, resulting in a denial of service. This issue only affected Ubuntu

12.04 LTS. (CVE-2012-1016)

It was discovered that Kerberos incorrectly handled certain malformed

KRB5_PADATA_PK_AS_REQ AS-REQ requests. A remote attacker could use this

issue to cause the daemon to crash, resulting in a denial of service. This

issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (CVE-2013-1415)

It was discovered that Kerberos incorrectly handled certain crafted TGS-REQ

requests. A remote authenticated attacker could use this issue to cause the

daemon to crash, resulting in a denial of service. This issue only affected

Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. (CVE-2013-1416)

It was disco...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu krb5

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  krb5-admin-server               1.12+dfsg-2ubuntu4.2
  krb5-kdc                        1.12+dfsg-2ubuntu4.2
  krb5-kdc-ldap                   1.12+dfsg-2ubuntu4.2
  krb5-otp                        1.12+dfsg-2ubuntu4.2
  krb5-pkinit                     1.12+dfsg-2ubuntu4.2
  krb5-user                       1.12+dfsg-2ubuntu4.2
  libgssapi-krb5-2                1.12+dfsg-2ubuntu4.2
  libgssrpc4                      1.12+dfsg-2ubuntu4.2
  libk5crypto3                    1.12+dfsg-2ubuntu4.2
  libkadm5clnt-mit9               1.12+dfsg-2ubuntu4.2
  libkadm5srv-mit9                1.12+dfsg-2ubuntu4.2
  libkdb5-7                       1.12+dfsg-2ubuntu4.2
  libkrad0                        1.12+dfsg-2ubuntu4.2
  libkrb5-3                       1.12+dfsg-2ubuntu4.2
  libkrb5support0                 1.12+dfsg-2ubuntu4.2

Ubuntu 12.04 LTS:
  krb5-admin-server               1.10+dfsg~beta1-2ubuntu0.5
  krb5-kdc                        1.10+dfsg~beta1-2ubuntu0.5
  krb5-kdc-ldap                   1.10+dfsg~beta1-2ubuntu0.5
  krb5-pkinit                     1.10+dfsg~beta1-2ubuntu0.5
  krb5-user                       1.10+dfsg~beta1-2ubuntu0.5
  libgssapi-krb5-2                1.10+dfsg~beta1-2ubuntu0.5
  libgssrpc4                      1.10+dfsg~beta1-2ubuntu0.5
  libk5crypto3                    1.10+dfsg~beta1-2ubuntu0.5
  libkadm5clnt-mit8               1.10+dfsg~beta1-2ubuntu0.5
  libkadm5srv-mit8                1.10+dfsg~beta1-2ubuntu0.5
  libkdb5-6                       1.10+dfsg~beta1-2ubuntu0.5
  libkrb5-3                       1.10+dfsg~beta1-2ubuntu0.5
  libkrb5support0                 1.10+dfsg~beta1-2ubuntu0.5

Ubuntu 10.04 LTS:
  krb5-admin-server               1.8.1+dfsg-2ubuntu0.13
  krb5-kdc                        1.8.1+dfsg-2ubuntu0.13
  krb5-kdc-ldap                   1.8.1+dfsg-2ubuntu0.13
  krb5-pkinit                     1.8.1+dfsg-2ubuntu0.13
  krb5-user                       1.8.1+dfsg-2ubuntu0.13
  libgssapi-krb5-2                1.8.1+dfsg-2ubuntu0.13
  libgssrpc4                      1.8.1+dfsg-2ubuntu0.13
  libk5crypto3                    1.8.1+dfsg-2ubuntu0.13
  libkadm5clnt-mit7               1.8.1+dfsg-2ubuntu0.13
  libkadm5srv-mit7                1.8.1+dfsg-2ubuntu0.13
  libkdb5-4                       1.8.1+dfsg-2ubuntu0.13
  libkrb5-3                       1.8.1+dfsg-2ubuntu0.13
  libkrb5support0                 1.8.1+dfsg-2ubuntu0.13

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2310-1

CVE-2012-1016, CVE-2013-1415, CVE-2013-1416, CVE-2013-1418,

CVE-2013-6800, CVE-2014-4341, CVE-2014-4342, CVE-2014-4343,

CVE-2014-4344, CVE-2014-4345

Severity
critical
Lowest
Low
Medium
High
Critical

August 11, 2014

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu krb5

Package Information

https://launchpad.net/ubuntu/+source/krb5/1.12+dfsg-2ubuntu4.2
https://launchpad.net/ubuntu/+source/krb5/1.10+dfsg~beta1-2ubuntu0.5
https://launchpad.net/ubuntu/+source/krb5/1.8.1+dfsg-2ubuntu0.13

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.