Packages
- krb5 -
Details
Keiichi Mori discovered that the MIT krb5 KDC database propagation
daemon (kpropd) is vulnerable to a denial of service attack due
to improper logic when a worker child process exited because
of invalid network input. This could only occur when kpropd is
running in standalone mode; kpropd was not affected when running in
incremental propagation mode ("iprop") or as an inetd server. This
issue only affects Ubuntu 9.10, Ubuntu 10.04 LTS, and Ubuntu
10.10. (CVE-2010-4022)
Kevin Longfellow and others discovered that the MIT krb5 Key
Distribution Center (KDC) daemon is vulnerable to denial of service
attacks when using an LDAP back end due to improper handling of
network input. (CVE-2011-0281, CVE-2011-0282)
Keiichi Mori discovered that the MIT krb5 KDC database propagation
daemon (kpropd) is vulnerable to a denial of service attack due
to improper logic when a worker child process exited because
of invalid network input. This could only occur when kpropd is
running in standalone mode; kpropd was not affected when running in
incremental propagation mode ("iprop") or as an inetd server. This
issue only affects Ubuntu 9.10, Ubuntu 10.04 LTS, and Ubuntu
10.10. (CVE-2010-4022)
Kevin Longfellow and others discovered that the MIT krb5 Key
Distribution Center (KDC) daemon is vulnerable to denial of service
attacks when using an LDAP back end due to improper handling of
network input. (CVE-2011-0281, CVE-2011-0282)
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 9.10 karmic | krb5-kdc-ldap – 1.7dfsg~beta3-1ubuntu0.9 | ||
| krb5-kdc – 1.7dfsg~beta3-1ubuntu0.9 | |||
| 8.04 hardy | krb5-kdc – 1.6.dfsg.3~beta1-2ubuntu1.8 | ||
| 10.10 maverick | krb5-kdc-ldap – 1.8.1+dfsg-5ubuntu0.4 | ||
| krb5-kdc – 1.8.1+dfsg-5ubuntu0.4 | |||
| 10.04 lucid | krb5-kdc-ldap – 1.8.1+dfsg-2ubuntu0.6 | ||
| krb5-kdc – 1.8.1+dfsg-2ubuntu0.6 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.