An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "krb5-admin-server", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-admin-server-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-doc", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-gss-samples", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-gss-samples-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-kdc", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-kdc-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-kdc-ldap", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-kdc-ldap-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-locales", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-multidev", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-otp", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-otp-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-pkinit", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-pkinit-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-user", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "krb5-user-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libgssapi-krb5-2", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libgssapi-krb5-2-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libgssrpc4", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libgssrpc4-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libk5crypto3", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libk5crypto3-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkadm5clnt-mit9", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkadm5clnt-mit9-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkadm5srv-mit8", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkadm5srv-mit9", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkadm5srv-mit9-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkdb5-7", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkdb5-7-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrad-dev", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrad0", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrad0-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5-3", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5-3-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5-dbg", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5-dev", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5support0", "binary_version": "1.12+dfsg-2ubuntu5.4" }, { "binary_name": "libkrb5support0-dbgsym", "binary_version": "1.12+dfsg-2ubuntu5.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "krb5-admin-server", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-admin-server-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-doc", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-gss-samples", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-gss-samples-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-k5tls", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-k5tls-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-kdc", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-kdc-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-kdc-ldap", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-kdc-ldap-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-locales", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-multidev", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-multidev-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-otp", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-otp-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-pkinit", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-pkinit-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-user", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "krb5-user-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libgssapi-krb5-2", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libgssapi-krb5-2-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libgssrpc4", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libgssrpc4-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libk5crypto3", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libk5crypto3-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkadm5clnt-mit9", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkadm5clnt-mit9-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkadm5srv-mit9", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkadm5srv-mit9-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkdb5-8", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkdb5-8-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrad-dev", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrad-dev-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrad0", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrad0-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5-3", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5-3-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5-dbg", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5-dev", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5-dev-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5support0", "binary_version": "1.13.2+dfsg-5ubuntu2.1" }, { "binary_name": "libkrb5support0-dbgsym", "binary_version": "1.13.2+dfsg-5ubuntu2.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "krb5-admin-server", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-admin-server-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-doc", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-gss-samples", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-gss-samples-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-k5tls", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-k5tls-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kdc", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kdc-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kdc-ldap", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kdc-ldap-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kpropd", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-kpropd-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-locales", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-multidev", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-otp", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-otp-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-pkinit", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-pkinit-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-user", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "krb5-user-dbgsym", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libgssapi-krb5-2", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libgssrpc4", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libk5crypto3", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkadm5clnt-mit11", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkadm5srv-mit11", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkdb5-9", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrad-dev", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrad0", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrb5-3", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrb5-dbg", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrb5-dev", "binary_version": "1.16-2ubuntu0.1" }, { "binary_name": "libkrb5support0", "binary_version": "1.16-2ubuntu0.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "krb5-admin-server", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-admin-server-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-doc", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-gss-samples", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-gss-samples-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-k5tls", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-k5tls-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kdc", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kdc-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kdc-ldap", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kdc-ldap-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kpropd", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-kpropd-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-locales", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-multidev", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-otp", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-otp-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-pkinit", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-pkinit-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-user", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "krb5-user-dbgsym", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libgssapi-krb5-2", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libgssrpc4", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libk5crypto3", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkadm5clnt-mit11", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkadm5srv-mit11", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkdb5-9", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrad-dev", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrad0", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrb5-3", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrb5-dbg", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrb5-dev", "binary_version": "1.17-6ubuntu4" }, { "binary_name": "libkrb5support0", "binary_version": "1.17-6ubuntu4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_name": "krb5-admin-server", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-admin-server-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-doc", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-gss-samples", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-gss-samples-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-k5tls", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-k5tls-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kdc", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kdc-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kdc-ldap", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kdc-ldap-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kpropd", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-kpropd-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-locales", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-multidev", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-otp", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-otp-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-pkinit", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-pkinit-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-user", "binary_version": "1.19.2-2" }, { "binary_name": "krb5-user-dbgsym", "binary_version": "1.19.2-2" }, { "binary_name": "libgssapi-krb5-2", "binary_version": "1.19.2-2" }, { "binary_name": "libgssrpc4", "binary_version": "1.19.2-2" }, { "binary_name": "libk5crypto3", "binary_version": "1.19.2-2" }, { "binary_name": "libkadm5clnt-mit12", "binary_version": "1.19.2-2" }, { "binary_name": "libkadm5srv-mit12", "binary_version": "1.19.2-2" }, { "binary_name": "libkdb5-10", "binary_version": "1.19.2-2" }, { "binary_name": "libkrad-dev", "binary_version": "1.19.2-2" }, { "binary_name": "libkrad0", "binary_version": "1.19.2-2" }, { "binary_name": "libkrb5-3", "binary_version": "1.19.2-2" }, { "binary_name": "libkrb5-dbg", "binary_version": "1.19.2-2" }, { "binary_name": "libkrb5-dev", "binary_version": "1.19.2-2" }, { "binary_name": "libkrb5support0", "binary_version": "1.19.2-2" } ] }