Amazon Linux AMI update for krb5



Published: 2019-01-25
Risk Low
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2018-5730
CVE-2018-5729
CWE-ID CWE-264
CWE-476
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		Amazon Linux AMI
Operating systems & Components / Operating system

Vendor Amazon Web Services

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Security restrictions bypass

EUVDB-ID: #VU11076

Risk: Low

CVSSv3.1: 5.5 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-5730

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote authenticated attacker to bypass security restrictions on a targeted system.

The weakness exists due to insufficient security restrictions. A remote attacker can add crafted principals to the Lightweight Directory Access Protocol (LDAP) database and bypass a DN containership check.

Mitigation

Update the affected packages.

i686:
    krb5-devel-1.15.1-34.44.amzn1.i686
    krb5-workstation-1.15.1-34.44.amzn1.i686
    krb5-pkinit-openssl-1.15.1-34.44.amzn1.i686
    krb5-server-1.15.1-34.44.amzn1.i686
    krb5-server-ldap-1.15.1-34.44.amzn1.i686
    libkadm5-1.15.1-34.44.amzn1.i686
    krb5-libs-1.15.1-34.44.amzn1.i686
    krb5-debuginfo-1.15.1-34.44.amzn1.i686

src:
    krb5-1.15.1-34.44.amzn1.src

x86_64:
    krb5-server-ldap-1.15.1-34.44.amzn1.x86_64
    krb5-devel-1.15.1-34.44.amzn1.x86_64
    krb5-debuginfo-1.15.1-34.44.amzn1.x86_64
    krb5-workstation-1.15.1-34.44.amzn1.x86_64
    libkadm5-1.15.1-34.44.amzn1.x86_64
    krb5-libs-1.15.1-34.44.amzn1.x86_64
    krb5-server-1.15.1-34.44.amzn1.x86_64
    krb5-pkinit-openssl-1.15.1-34.44.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

External links

http://alas.aws.amazon.com/ALAS-2018-1129.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU11080

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-5729

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference. A local attacker can add crafted principals to the Lightweight Directory Access Protocol (LDAP) database and cause the service to crash.

Mitigation

Update the affected packages.

i686:
    krb5-devel-1.15.1-34.44.amzn1.i686
    krb5-workstation-1.15.1-34.44.amzn1.i686
    krb5-pkinit-openssl-1.15.1-34.44.amzn1.i686
    krb5-server-1.15.1-34.44.amzn1.i686
    krb5-server-ldap-1.15.1-34.44.amzn1.i686
    libkadm5-1.15.1-34.44.amzn1.i686
    krb5-libs-1.15.1-34.44.amzn1.i686
    krb5-debuginfo-1.15.1-34.44.amzn1.i686

src:
    krb5-1.15.1-34.44.amzn1.src

x86_64:
    krb5-server-ldap-1.15.1-34.44.amzn1.x86_64
    krb5-devel-1.15.1-34.44.amzn1.x86_64
    krb5-debuginfo-1.15.1-34.44.amzn1.x86_64
    krb5-workstation-1.15.1-34.44.amzn1.x86_64
    libkadm5-1.15.1-34.44.amzn1.x86_64
    krb5-libs-1.15.1-34.44.amzn1.x86_64
    krb5-server-1.15.1-34.44.amzn1.x86_64
    krb5-pkinit-openssl-1.15.1-34.44.amzn1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

External links

http://alas.aws.amazon.com/ALAS-2018-1129.html


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###