USN-6947-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-6947-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6947-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6947-1

Related

CVE-2024-37370
CVE-2024-37371
UBUNTU-CVE-2024-37370
UBUNTU-CVE-2024-37371

Published

2024-08-08T02:20:23.351307Z

Modified

2024-08-08T02:20:23.351307Z

Summary

krb5 vulnerabilities

Details

It was discovered that Kerberos incorrectly handled GSS message tokens where an unwrapped token could appear to be truncated. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-37370)

It was discovered that Kerberos incorrectly handled GSS message tokens when sent a token with invalid length fields. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-37371)

References

Affected packages

Ubuntu:Pro:14.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.12+dfsg-2ubuntu5.4+esm5?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12+dfsg-2ubuntu5.4+esm5

Affected versions

1.*

1.10.1+dfsg-6.1ubuntu1

1.11.3+dfsg-3ubuntu2

1.12+dfsg-2ubuntu1

1.12+dfsg-2ubuntu2

1.12+dfsg-2ubuntu3

1.12+dfsg-2ubuntu4

1.12+dfsg-2ubuntu4.2

1.12+dfsg-2ubuntu5

1.12+dfsg-2ubuntu5.1

1.12+dfsg-2ubuntu5.2

1.12+dfsg-2ubuntu5.3

1.12+dfsg-2ubuntu5.4

1.12+dfsg-2ubuntu5.4+esm1

1.12+dfsg-2ubuntu5.4+esm2

1.12+dfsg-2ubuntu5.4+esm3

1.12+dfsg-2ubuntu5.4+esm4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libk5crypto3": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkdb5-7": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-otp-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-pkinit-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-kdc": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5-dbg": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-admin-server": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-user-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-otp": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-user": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5-3-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libgssrpc4": "1.12+dfsg-2ubuntu5.4+esm5",
            "libgssapi-krb5-2-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrad0": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5-3": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-gss-samples-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrad-dev": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5support0-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkdb5-7-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-multidev": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkadm5srv-mit9": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-gss-samples": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkadm5srv-mit9-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrad0-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-kdc-ldap-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libk5crypto3-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkadm5clnt-mit9": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-kdc-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-locales": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-doc": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkadm5clnt-mit9-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-pkinit": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5-dev": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkrb5support0": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-admin-server-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libgssapi-krb5-2": "1.12+dfsg-2ubuntu5.4+esm5",
            "krb5-kdc-ldap": "1.12+dfsg-2ubuntu5.4+esm5",
            "libgssrpc4-dbgsym": "1.12+dfsg-2ubuntu5.4+esm5",
            "libkadm5srv-mit8": "1.12+dfsg-2ubuntu5.4+esm5"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.13.2+dfsg-5ubuntu2.2+esm5?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.2+dfsg-5ubuntu2.2+esm5

Affected versions

1.*

1.13.2+dfsg-2

1.13.2+dfsg-3

1.13.2+dfsg-4

1.13.2+dfsg-5

1.13.2+dfsg-5ubuntu1

1.13.2+dfsg-5ubuntu2

1.13.2+dfsg-5ubuntu2.1

1.13.2+dfsg-5ubuntu2.1+esm1

1.13.2+dfsg-5ubuntu2.2

1.13.2+dfsg-5ubuntu2.2+esm3

1.13.2+dfsg-5ubuntu2.2+esm4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libk5crypto3": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-otp-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-pkinit-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5-dev-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-kdc": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5-dbg": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-admin-server": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-user-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-otp": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkdb5-8": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5-3-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-user": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libgssrpc4": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libgssapi-krb5-2-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkdb5-8-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrad0": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5-3": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-gss-samples-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrad-dev": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5support0-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-multidev": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkadm5srv-mit9": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-gss-samples": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkadm5srv-mit9-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrad0-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-kdc-ldap-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-multidev-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libk5crypto3-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkadm5clnt-mit9": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-k5tls-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-locales": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrad-dev-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-doc": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkadm5clnt-mit9-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-pkinit": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5-dev": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libkrb5support0": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-admin-server-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libgssapi-krb5-2": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-k5tls": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-kdc-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "krb5-kdc-ldap": "1.13.2+dfsg-5ubuntu2.2+esm5",
            "libgssrpc4-dbgsym": "1.13.2+dfsg-5ubuntu2.2+esm5"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.16-2ubuntu0.4+esm2?arch=src?distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16-2ubuntu0.4+esm2

Affected versions

1.*

1.15.1-2

1.16-2

1.16-2build1

1.16-2ubuntu0.1

1.16-2ubuntu0.1+esm1

1.16-2ubuntu0.2

1.16-2ubuntu0.3

1.16-2ubuntu0.4

1.16-2ubuntu0.4+esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libk5crypto3": "1.16-2ubuntu0.4+esm2",
            "krb5-otp-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-kpropd": "1.16-2ubuntu0.4+esm2",
            "libkadm5srv-mit11": "1.16-2ubuntu0.4+esm2",
            "krb5-pkinit-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-kdc": "1.16-2ubuntu0.4+esm2",
            "libkrb5-dbg": "1.16-2ubuntu0.4+esm2",
            "krb5-admin-server": "1.16-2ubuntu0.4+esm2",
            "krb5-user-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-otp": "1.16-2ubuntu0.4+esm2",
            "krb5-user": "1.16-2ubuntu0.4+esm2",
            "libgssrpc4": "1.16-2ubuntu0.4+esm2",
            "libkrad0": "1.16-2ubuntu0.4+esm2",
            "libkrb5-3": "1.16-2ubuntu0.4+esm2",
            "krb5-gss-samples-dbgsym": "1.16-2ubuntu0.4+esm2",
            "libkrad-dev": "1.16-2ubuntu0.4+esm2",
            "libkadm5clnt-mit11": "1.16-2ubuntu0.4+esm2",
            "krb5-multidev": "1.16-2ubuntu0.4+esm2",
            "krb5-gss-samples": "1.16-2ubuntu0.4+esm2",
            "krb5-kpropd-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-kdc-ldap-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-k5tls-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-locales": "1.16-2ubuntu0.4+esm2",
            "krb5-kdc-dbgsym": "1.16-2ubuntu0.4+esm2",
            "krb5-doc": "1.16-2ubuntu0.4+esm2",
            "libkrb5support0": "1.16-2ubuntu0.4+esm2",
            "krb5-pkinit": "1.16-2ubuntu0.4+esm2",
            "libkrb5-dev": "1.16-2ubuntu0.4+esm2",
            "krb5-admin-server-dbgsym": "1.16-2ubuntu0.4+esm2",
            "libgssapi-krb5-2": "1.16-2ubuntu0.4+esm2",
            "krb5-k5tls": "1.16-2ubuntu0.4+esm2",
            "krb5-kdc-ldap": "1.16-2ubuntu0.4+esm2",
            "libkdb5-9": "1.16-2ubuntu0.4+esm2"
        }
    ]
}

Ubuntu:20.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.17-6ubuntu4.6?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17-6ubuntu4.6

Affected versions

1.*

1.17-6

1.17-6ubuntu3

1.17-6ubuntu4

1.17-6ubuntu4.1

1.17-6ubuntu4.2

1.17-6ubuntu4.3

1.17-6ubuntu4.4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libk5crypto3": "1.17-6ubuntu4.6",
            "krb5-otp-dbgsym": "1.17-6ubuntu4.6",
            "krb5-kpropd": "1.17-6ubuntu4.6",
            "libkadm5srv-mit11": "1.17-6ubuntu4.6",
            "krb5-pkinit-dbgsym": "1.17-6ubuntu4.6",
            "krb5-kdc": "1.17-6ubuntu4.6",
            "libkrb5-dbg": "1.17-6ubuntu4.6",
            "krb5-admin-server": "1.17-6ubuntu4.6",
            "krb5-user-dbgsym": "1.17-6ubuntu4.6",
            "krb5-otp": "1.17-6ubuntu4.6",
            "krb5-user": "1.17-6ubuntu4.6",
            "libgssrpc4": "1.17-6ubuntu4.6",
            "libkrad0": "1.17-6ubuntu4.6",
            "libkrb5-3": "1.17-6ubuntu4.6",
            "krb5-gss-samples-dbgsym": "1.17-6ubuntu4.6",
            "libkrad-dev": "1.17-6ubuntu4.6",
            "libkadm5clnt-mit11": "1.17-6ubuntu4.6",
            "krb5-multidev": "1.17-6ubuntu4.6",
            "krb5-gss-samples": "1.17-6ubuntu4.6",
            "krb5-kpropd-dbgsym": "1.17-6ubuntu4.6",
            "krb5-kdc-ldap-dbgsym": "1.17-6ubuntu4.6",
            "krb5-k5tls-dbgsym": "1.17-6ubuntu4.6",
            "krb5-locales": "1.17-6ubuntu4.6",
            "krb5-kdc-dbgsym": "1.17-6ubuntu4.6",
            "krb5-doc": "1.17-6ubuntu4.6",
            "libkrb5support0": "1.17-6ubuntu4.6",
            "krb5-pkinit": "1.17-6ubuntu4.6",
            "libkrb5-dev": "1.17-6ubuntu4.6",
            "krb5-admin-server-dbgsym": "1.17-6ubuntu4.6",
            "libgssapi-krb5-2": "1.17-6ubuntu4.6",
            "krb5-k5tls": "1.17-6ubuntu4.6",
            "krb5-kdc-ldap": "1.17-6ubuntu4.6",
            "libkdb5-9": "1.17-6ubuntu4.6"
        }
    ]
}

Ubuntu:22.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.19.2-2ubuntu0.4?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.19.2-2ubuntu0.4

Affected versions

1.*

1.18.3-6

1.18.3-7

1.19.2-0ubuntu1

1.19.2-1

1.19.2-2

1.19.2-2ubuntu0.1

1.19.2-2ubuntu0.2

1.19.2-2ubuntu0.3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libk5crypto3": "1.19.2-2ubuntu0.4",
            "libkadm5srv-mit12": "1.19.2-2ubuntu0.4",
            "krb5-otp-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-kpropd": "1.19.2-2ubuntu0.4",
            "krb5-pkinit-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-kdc": "1.19.2-2ubuntu0.4",
            "libkrb5-dbg": "1.19.2-2ubuntu0.4",
            "krb5-admin-server": "1.19.2-2ubuntu0.4",
            "krb5-user-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-otp": "1.19.2-2ubuntu0.4",
            "krb5-user": "1.19.2-2ubuntu0.4",
            "libgssrpc4": "1.19.2-2ubuntu0.4",
            "libkdb5-10": "1.19.2-2ubuntu0.4",
            "libkrad0": "1.19.2-2ubuntu0.4",
            "libkrb5-3": "1.19.2-2ubuntu0.4",
            "krb5-gss-samples-dbgsym": "1.19.2-2ubuntu0.4",
            "libkrad-dev": "1.19.2-2ubuntu0.4",
            "krb5-multidev": "1.19.2-2ubuntu0.4",
            "krb5-gss-samples": "1.19.2-2ubuntu0.4",
            "krb5-kpropd-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-kdc-ldap-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-k5tls-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-locales": "1.19.2-2ubuntu0.4",
            "krb5-kdc-dbgsym": "1.19.2-2ubuntu0.4",
            "krb5-doc": "1.19.2-2ubuntu0.4",
            "libkadm5clnt-mit12": "1.19.2-2ubuntu0.4",
            "krb5-pkinit": "1.19.2-2ubuntu0.4",
            "libkrb5-dev": "1.19.2-2ubuntu0.4",
            "libkrb5support0": "1.19.2-2ubuntu0.4",
            "krb5-admin-server-dbgsym": "1.19.2-2ubuntu0.4",
            "libgssapi-krb5-2": "1.19.2-2ubuntu0.4",
            "krb5-k5tls": "1.19.2-2ubuntu0.4",
            "krb5-kdc-ldap": "1.19.2-2ubuntu0.4"
        }
    ]
}

Ubuntu:24.04:LTS / krb5

Package

Name: krb5
Purl: pkg:deb/ubuntu/krb5@1.20.1-6ubuntu2.1?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.1-6ubuntu2.1

Affected versions

1.*

1.20.1-3ubuntu1

1.20.1-5build1

1.20.1-6ubuntu1

1.20.1-6ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libk5crypto3": "1.20.1-6ubuntu2.1",
            "libgssrpc4t64": "1.20.1-6ubuntu2.1",
            "libkadm5srv-mit12": "1.20.1-6ubuntu2.1",
            "krb5-otp-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-kpropd": "1.20.1-6ubuntu2.1",
            "krb5-pkinit-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-kdc": "1.20.1-6ubuntu2.1",
            "libkrb5-dbg": "1.20.1-6ubuntu2.1",
            "krb5-admin-server": "1.20.1-6ubuntu2.1",
            "krb5-user-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-otp": "1.20.1-6ubuntu2.1",
            "krb5-user": "1.20.1-6ubuntu2.1",
            "libkdb5-10t64": "1.20.1-6ubuntu2.1",
            "libkrad0": "1.20.1-6ubuntu2.1",
            "libkrb5-3": "1.20.1-6ubuntu2.1",
            "krb5-gss-samples-dbgsym": "1.20.1-6ubuntu2.1",
            "libkrad-dev": "1.20.1-6ubuntu2.1",
            "krb5-multidev": "1.20.1-6ubuntu2.1",
            "krb5-gss-samples": "1.20.1-6ubuntu2.1",
            "krb5-kpropd-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-kdc-ldap-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-k5tls-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-locales": "1.20.1-6ubuntu2.1",
            "krb5-kdc-dbgsym": "1.20.1-6ubuntu2.1",
            "krb5-doc": "1.20.1-6ubuntu2.1",
            "libkadm5clnt-mit12": "1.20.1-6ubuntu2.1",
            "krb5-pkinit": "1.20.1-6ubuntu2.1",
            "libkrb5-dev": "1.20.1-6ubuntu2.1",
            "libkrb5support0": "1.20.1-6ubuntu2.1",
            "krb5-admin-server-dbgsym": "1.20.1-6ubuntu2.1",
            "libgssapi-krb5-2": "1.20.1-6ubuntu2.1",
            "krb5-k5tls": "1.20.1-6ubuntu2.1",
            "krb5-kdc-ldap": "1.20.1-6ubuntu2.1"
        }
    ]
}