Lucene search

K
ubuntuUbuntuUSN-999-1
HistoryOct 05, 2010 - 12:00 a.m.

Kerberos vulnerability

2010-10-0500:00:00
ubuntu.com
41

6.4 Medium

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04

Packages

  • krb5 - MIT Kerberos

Details

Mike Roszkowski discovered that the Kerberos KDC did not correctly
validate the contents of certain messages. If an authenticated remote
attacker sent specially crafted TGS requests, the KDC service would crash,
leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.10noarchkrb5-kdc< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchkrb5-admin-server< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchkrb5-kdc-ldap< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchkrb5-multidev< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchkrb5-pkinit< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchkrb5-user< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchlibgssapi-krb5-2< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchlibgssrpc4< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchlibk5crypto3< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Ubuntu10.10noarchlibkadm5clnt-mit7< 1.8.1+dfsg-5ubuntu0.1UNKNOWN
Rows per page:
1-10 of 321

6.4 Medium

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%