Ubuntu update for krb5

Published: 2024-08-08

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2024-37370 CVE-2024-37371
CWE-ID	CWE-20 CWE-125
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Ubuntu Operating systems & Components / Operating system libkdb5-9 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5srv-mit11 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5clnt-mit11 (Ubuntu package) Operating systems & Components / Operating system package or component libkdb5-10 (Ubuntu package) Operating systems & Components / Operating system package or component libgssrpc4 (Ubuntu package) Operating systems & Components / Operating system package or component libkrb5support0 (Ubuntu package) Operating systems & Components / Operating system package or component libkrb5-3 (Ubuntu package) Operating systems & Components / Operating system package or component libkrad0 (Ubuntu package) Operating systems & Components / Operating system package or component libkdb5-10t64 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5srv-mit12 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5clnt-mit12 (Ubuntu package) Operating systems & Components / Operating system package or component libk5crypto3 (Ubuntu package) Operating systems & Components / Operating system package or component libgssrpc4t64 (Ubuntu package) Operating systems & Components / Operating system package or component libgssapi-krb5-2 (Ubuntu package) Operating systems & Components / Operating system package or component krb5-user (Ubuntu package) Operating systems & Components / Operating system package or component krb5-pkinit (Ubuntu package) Operating systems & Components / Operating system package or component krb5-otp (Ubuntu package) Operating systems & Components / Operating system package or component krb5-kdc-ldap (Ubuntu package) Operating systems & Components / Operating system package or component krb5-kdc (Ubuntu package) Operating systems & Components / Operating system package or component krb5-admin-server (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5srv-mit8 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5srv-mit9 (Ubuntu package) Operating systems & Components / Operating system package or component libkadm5clnt-mit9 (Ubuntu package) Operating systems & Components / Operating system package or component libkdb5-7 (Ubuntu package) Operating systems & Components / Operating system package or component libkdb5-8 (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU93518

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-37370

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application.

Mitigation

Update the affected package krb5 to the latest version.

Vulnerable software versions

Ubuntu: 14.04 - 24.04

libkdb5-9 (Ubuntu package): before Ubuntu Pro

libkadm5srv-mit11 (Ubuntu package): before Ubuntu Pro

libkadm5clnt-mit11 (Ubuntu package): before Ubuntu Pro

libkdb5-10 (Ubuntu package): before 1.19.2-2ubuntu0.4

libgssrpc4 (Ubuntu package): before Ubuntu Pro

libkrb5support0 (Ubuntu package): before Ubuntu Pro

libkrb5-3 (Ubuntu package): before Ubuntu Pro

libkrad0 (Ubuntu package): before Ubuntu Pro

libkdb5-10t64 (Ubuntu package): before 1.20.1-6ubuntu2.1

libkadm5srv-mit12 (Ubuntu package): before 1.20.1-6ubuntu2.1

libkadm5clnt-mit12 (Ubuntu package): before 1.20.1-6ubuntu2.1

libk5crypto3 (Ubuntu package): before Ubuntu Pro

libgssrpc4t64 (Ubuntu package): before 1.20.1-6ubuntu2.1

libgssapi-krb5-2 (Ubuntu package): before Ubuntu Pro (Infra-only)

krb5-user (Ubuntu package): before Ubuntu Pro (Infra-only)

krb5-pkinit (Ubuntu package): before Ubuntu Pro

krb5-otp (Ubuntu package): before Ubuntu Pro

krb5-kdc-ldap (Ubuntu package): before Ubuntu Pro

krb5-kdc (Ubuntu package): before Ubuntu Pro (Infra-only)

krb5-admin-server (Ubuntu package): before Ubuntu Pro (Infra-only)

libkadm5srv-mit8 (Ubuntu package): before Ubuntu Pro

libkadm5srv-mit9 (Ubuntu package): before Ubuntu Pro

libkadm5clnt-mit9 (Ubuntu package): before Ubuntu Pro

libkdb5-7 (Ubuntu package): before Ubuntu Pro (Infra-only)

libkdb5-8 (Ubuntu package): before Ubuntu Pro (Infra-only)

External links

http://ubuntu.com/security/notices/USN-6947-1

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU93519