[SECURITY] [DSA 4795-1] krb5 security update

2020-11-2118:19:03

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.5%

JSON

Debian Security Advisory DSA-4795-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
November 21, 2020 https://www.debian.org/security/faq

Package : krb5
CVE ID : CVE-2020-28196

Demi Obeneour discovered that unbounded recursion in the ASN1 parser
of libkrb5 could result in denial of service.

For the stable distribution (buster), this problem has been fixed in
version 1.17-3+deb10u1.

We recommend that you upgrade your krb5 packages.

For the detailed security status of krb5 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/krb5

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9armelkrb5-kdc< 1.15-1+deb9u2krb5-kdc_1.15-1+deb9u2_armel.deb
Debian9i386libkadm5srv-mit11< 1.15-1+deb9u2libkadm5srv-mit11_1.15-1+deb9u2_i386.deb
Debian10mipselkrb5-otp< 1.17-3+deb10u1krb5-otp_1.17-3+deb10u1_mipsel.deb
Debian10arm64libkrb5support0< 1.17-3+deb10u1libkrb5support0_1.17-3+deb10u1_arm64.deb
Debian9amd64libkadm5srv-mit11< 1.15-1+deb9u2libkadm5srv-mit11_1.15-1+deb9u2_amd64.deb
Debian10armhflibk5crypto3< 1.17-3+deb10u1libk5crypto3_1.17-3+deb10u1_armhf.deb
Debian9amd64libgssrpc4< 1.15-1+deb9u2libgssrpc4_1.15-1+deb9u2_amd64.deb
Debian9armhfkrb5-kdc-ldap< 1.15-1+deb9u2krb5-kdc-ldap_1.15-1+deb9u2_armhf.deb
Debian10i386krb5-pkinit< 1.17-3+deb10u1krb5-pkinit_1.17-3+deb10u1_i386.deb
Debian10amd64libkadm5srv-mit11< 1.17-3+deb10u1libkadm5srv-mit11_1.17-3+deb10u1_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	armel	krb5-kdc	< 1.15-1+deb9u2	krb5-kdc_1.15-1+deb9u2_armel.deb
Debian	9	i386	libkadm5srv-mit11	< 1.15-1+deb9u2	libkadm5srv-mit11_1.15-1+deb9u2_i386.deb
Debian	10	mipsel	krb5-otp	< 1.17-3+deb10u1	krb5-otp_1.17-3+deb10u1_mipsel.deb
Debian	10	arm64	libkrb5support0	< 1.17-3+deb10u1	libkrb5support0_1.17-3+deb10u1_arm64.deb
Debian	9	amd64	libkadm5srv-mit11	< 1.15-1+deb9u2	libkadm5srv-mit11_1.15-1+deb9u2_amd64.deb
Debian	10	armhf	libk5crypto3	< 1.17-3+deb10u1	libk5crypto3_1.17-3+deb10u1_armhf.deb
Debian	9	amd64	libgssrpc4	< 1.15-1+deb9u2	libgssrpc4_1.15-1+deb9u2_amd64.deb
Debian	9	armhf	krb5-kdc-ldap	< 1.15-1+deb9u2	krb5-kdc-ldap_1.15-1+deb9u2_armhf.deb
Debian	10	i386	krb5-pkinit	< 1.17-3+deb10u1	krb5-pkinit_1.17-3+deb10u1_i386.deb
Debian	10	amd64	libkadm5srv-mit11	< 1.17-3+deb10u1	libkadm5srv-mit11_1.17-3+deb10u1_amd64.deb