Kerberos vulnerability

2011-12-0800:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

JSON

Releases

Ubuntu 11.10

Packages

krb5 - MIT Kerberos Network Authentication Protocol

Details

Simo Sorce discovered that a NULL pointer dereference existed in
the Kerberos Key Distribution Center (KDC). An authenticated remote
attacker could use this to cause a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchkrb5-kdc< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-admin-server< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-gss-samples< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-kdc-ldap< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-multidev< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-pkinit< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchkrb5-user< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchlibgssapi-krb5-2< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchlibgssrpc4< 1.9.1+dfsg-1ubuntu2.2UNKNOWN
Ubuntu11.10noarchlibk5crypto3< 1.9.1+dfsg-1ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	krb5-kdc	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-admin-server	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-gss-samples	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-kdc-ldap	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-multidev	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-pkinit	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	krb5-user	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	libgssapi-krb5-2	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	libgssrpc4	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN
Ubuntu	11.10	noarch	libk5crypto3	< 1.9.1+dfsg-1ubuntu2.2	UNKNOWN