Alerts This Week
Warning Icon 1 1,179
Alerts This Week
Warning Icon 1 1,179

Ubuntu: 4314-1 Critical Vulnerability in pam-krb5 Code Execution Risk

ubuntu
Calendar Grey March 31, 2020
Dist Ubuntu Esm H88
In a recent update, Ubuntu Security Notice USN-4314-1 discloses a significant vulnerability in libpam-krb5 that allows for unauthorized execution of code.
pam-krb5 could be made to execute arbitrary code if it received a specially crafted response.

Summary

pam-krb5 could be made to execute arbitrary code if it received a specially

crafted response.

Software Description:

- libpam-krb5: PAM module for MIT Kerberos

Details:

Russ Allbery discovered that pam-krb5 incorrectly handled some responses.

An attacker could possibly use this issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory remote exploit code execution Ubuntu libpam-krb5

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libpam-krb5                     4.8-2ubuntu0.1

Ubuntu 18.04 LTS:
  libpam-krb5                     4.8-1ubuntu0.1

Ubuntu 16.04 LTS:
  libpam-krb5                     4.7-2ubuntu0.1

Ubuntu 14.04 ESM:
  libpam-krb5                     4.6-2ubuntu0.1~esm1

Ubuntu 12.04 ESM:
  libpam-krb5                     4.5-3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4314-1

CVE-2020-10595

Severity
critical
Lowest
Low
Medium
High
Critical

March 31, 2020

Topics%20covered

Topics Covered

security advisory remote exploit code execution Ubuntu libpam-krb5

Package Information

https://launchpad.net/ubuntu/+source/libpam-krb5/4.8-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libpam-krb5/4.8-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libpam-krb5/4.7-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here