{"id":58710,"date":"2024-08-08T19:40:00","date_gmt":"2024-08-08T16:40:00","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/180003\/USN-6947-1.txt"},"modified":"2024-08-08T19:40:00","modified_gmt":"2024-08-08T16:40:00","slug":"ubuntu-security-notice-usn-6947-1","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/ubuntu-security-notice-usn-6947-1\/","title":{"rendered":"Ubuntu Security Notice USN-6947-1"},"content":{"rendered":"

==========================================================================<\/p>\n

Ubuntu Security Notice USN-6947-1
August 08, 2024<\/p>\n

krb5 vulnerabilities
==========================================================================<\/p>\n

A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n

– Ubuntu 24.04 LTS
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS<\/p>\n

Summary:<\/p>\n

Kerberos could be made to crash if it received specially crafted
input.<\/p>\n

Software Description:
– krb5: MIT Kerberos Network Authentication Protocol<\/p>\n

Details:<\/p>\n

It was discovered that Kerberos incorrectly handled GSS message tokens
where an unwrapped token could appear to be truncated. An attacker
could possibly use this issue to cause a denial of service.
(CVE-2024-37370)<\/p>\n

It was discovered that Kerberos incorrectly handled GSS message tokens
when sent a token with invalid length fields. An attacker could possibly
use this issue to cause a denial of service. (CVE-2024-37371)<\/p>\n

Update instructions:<\/p>\n

The problem can be corrected by updating your system to the following
package versions:<\/p>\n

Ubuntu 24.04 LTS
krb5-admin-server 1.20.1-6ubuntu2.1
krb5-kdc 1.20.1-6ubuntu2.1
krb5-kdc-ldap 1.20.1-6ubuntu2.1
krb5-otp 1.20.1-6ubuntu2.1
krb5-pkinit 1.20.1-6ubuntu2.1
krb5-user 1.20.1-6ubuntu2.1
libgssapi-krb5-2 1.20.1-6ubuntu2.1
libgssrpc4t64 1.20.1-6ubuntu2.1
libk5crypto3 1.20.1-6ubuntu2.1
libkadm5clnt-mit12 1.20.1-6ubuntu2.1
libkadm5srv-mit12 1.20.1-6ubuntu2.1
libkdb5-10t64 1.20.1-6ubuntu2.1
libkrad0 1.20.1-6ubuntu2.1
libkrb5-3 1.20.1-6ubuntu2.1
libkrb5support0 1.20.1-6ubuntu2.1<\/p>\n

Ubuntu 22.04 LTS
krb5-admin-server 1.19.2-2ubuntu0.4
krb5-kdc 1.19.2-2ubuntu0.4
krb5-kdc-ldap 1.19.2-2ubuntu0.4
krb5-otp 1.19.2-2ubuntu0.4
krb5-pkinit 1.19.2-2ubuntu0.4
krb5-user 1.19.2-2ubuntu0.4
libgssapi-krb5-2 1.19.2-2ubuntu0.4
libgssrpc4 1.19.2-2ubuntu0.4
libk5crypto3 1.19.2-2ubuntu0.4
libkadm5clnt-mit12 1.19.2-2ubuntu0.4
libkadm5srv-mit12 1.19.2-2ubuntu0.4
libkdb5-10 1.19.2-2ubuntu0.4
libkrad0 1.19.2-2ubuntu0.4
libkrb5-3 1.19.2-2ubuntu0.4
libkrb5support0 1.19.2-2ubuntu0.4<\/p>\n

Ubuntu 20.04 LTS
krb5-admin-server 1.17-6ubuntu4.6
krb5-kdc 1.17-6ubuntu4.6
krb5-kdc-ldap 1.17-6ubuntu4.6
krb5-otp 1.17-6ubuntu4.6
krb5-pkinit 1.17-6ubuntu4.6
krb5-user 1.17-6ubuntu4.6
libgssapi-krb5-2 1.17-6ubuntu4.6
libgssrpc4 1.17-6ubuntu4.6
libk5crypto3 1.17-6ubuntu4.6
libkadm5clnt-mit11 1.17-6ubuntu4.6
libkadm5srv-mit11 1.17-6ubuntu4.6
libkdb5-9 1.17-6ubuntu4.6
libkrad0 1.17-6ubuntu4.6
libkrb5-3 1.17-6ubuntu4.6
libkrb5support0 1.17-6ubuntu4.6<\/p>\n

Ubuntu 18.04 LTS
krb5-admin-server 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
krb5-kdc 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
krb5-kdc-ldap 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
krb5-otp 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
krb5-pkinit 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
krb5-user 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libgssapi-krb5-2 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libgssrpc4 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libk5crypto3 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkadm5clnt-mit11 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkadm5srv-mit11 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkdb5-9 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkrad0 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkrb5-3 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro
libkrb5support0 1.16-2ubuntu0.4+esm2
Available with Ubuntu Pro<\/p>\n

Ubuntu 16.04 LTS
krb5-admin-server 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
krb5-kdc 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
krb5-kdc-ldap 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
krb5-otp 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
krb5-pkinit 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
krb5-user 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libgssapi-krb5-2 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libgssrpc4 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libk5crypto3 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkadm5clnt-mit9 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkadm5srv-mit9 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkdb5-8 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkrad0 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkrb5-3 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro
libkrb5support0 1.13.2+dfsg-5ubuntu2.2+esm5
Available with Ubuntu Pro<\/p>\n

Ubuntu 14.04 LTS
krb5-admin-server 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
krb5-kdc 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
krb5-kdc-ldap 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
krb5-otp 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
krb5-pkinit 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
krb5-user 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libgssapi-krb5-2 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libgssrpc4 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libk5crypto3 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkadm5clnt-mit9 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkadm5srv-mit8 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkadm5srv-mit9 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkdb5-7 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkrad0 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkrb5-3 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro
libkrb5support0 1.12+dfsg-2ubuntu5.4+esm5
Available with Ubuntu Pro<\/p>\n

In general, a standard system update will make all the necessary changes.<\/p>\n

References:
https:\/\/ubuntu.com\/security\/notices\/USN-6947-1
<https:\/\/ubuntu.com\/security\/notices\/USN-6947-1>
CVE-2024-37370, CVE-2024-37371<\/p>\n

Package Information:
https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.20.1-6ubuntu2.1
<https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.20.1-6ubuntu2.1>
https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.19.2-2ubuntu0.4
<https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.19.2-2ubuntu0.4>
https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.17-6ubuntu4.6
<https:\/\/launchpad.net\/ubuntu\/+source\/krb5\/1.17-6ubuntu4.6><\/p>\n","protected":false},"excerpt":{"rendered":"

========================================================================== Ubuntu Security Notice USN-6947-1August 08, 2024 krb5 vulnerabilities========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 24.04 LTS– Ubuntu 22.04 LTS– Ubuntu 20.04 LTS– Ubuntu 18.04 LTS– Ubuntu 16.04 LTS– Ubuntu 14.04 LTS Summary: Kerberos could be made to crash if it received specially craftedinput. Software Description:– krb5: MIT …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58710","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58710"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58710\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58710"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58710"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}