Lucene search

K
osvGoogleOSV:USN-6467-2
HistoryNov 06, 2023 - 9:36 a.m.

krb5 vulnerability

2023-11-0609:36:15
Google
osv.dev
6
usn-6467-1
kerberos
memory access
vulnerability
ubuntu
20.04 lts
22.04 lts
23.04
rpc data
kadmind
denial of service

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.5%

USN-6467-1 fixed a vulnerability in Kerberos. This update provides the
corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu
23.04.

Original advisory details:

Robert Morris discovered that Kerberos did not properly handle memory
access when processing RPC data through kadmind, which could lead to the
freeing of uninitialized memory. An authenticated remote attacker could
possibly use this issue to cause kadmind to crash, resulting in a denial
of service.