copyright | disclaimer | privacy | contact  
Australia's Leading Computer Emergency Response Team
 
Search this site

 
On this site

 > HOME
 > About AusCERT
 > Membership
 > Contact Us
 > PKI Services
 > Publications
 > Sec. Bulletins
 > Conferences
 > News & Media
 > Services
 > Web Log
 > Site Map
 > Site Help
 > Member login





 

ESB-2016.0299 - [UNIX/Linux][Debian] krb5: Multiple vulnerabilities

Date: 05 February 2016
References: ESB-2016.0759  ESB-2016.0837  ESB-2016.1362  ESB-2016.1657  

Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2016.0299
                           krb5 security update
                              5 February 2016

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           krb5
Publisher:         Debian
Operating System:  Debian GNU/Linux 7
                   Debian GNU/Linux 8
                   UNIX variants (UNIX, Linux, OSX)
Impact/Access:     Denial of Service        -- Existing Account
                   Access Confidential Data -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2015-8631 CVE-2015-8630 CVE-2015-8629

Original Bulletin: 
   http://www.debian.org/security/2016/dsa-3466

Comment: This advisory references vulnerabilities in products which run on 
         platforms other than Debian. It is recommended that administrators 
         running krb5 check for an updated version of the software for their
         operating system.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- - -------------------------------------------------------------------------
Debian Security Advisory DSA-3466-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
February 04, 2016                     https://www.debian.org/security/faq
- - -------------------------------------------------------------------------

Package        : krb5
CVE ID         : CVE-2015-8629 CVE-2015-8630 CVE-2015-8631
Debian Bug     : 813126 813127 813296

Several vulnerabilities were discovered in krb5, the MIT implementation
of Kerberos. The Common Vulnerabilities and Exposures project identifies
the following problems:

CVE-2015-8629

    It was discovered that an authenticated attacker can cause kadmind
    to read beyond the end of allocated memory by sending a string
    without a terminating zero byte. Information leakage may be possible
    for an attacker with permission to modify the database.

CVE-2015-8630

    It was discovered that an authenticated attacker with permission to
    modify a principal entry can cause kadmind to dereference a null
    pointer by supplying a null policy value but including KADM5_POLICY
    in the mask.

CVE-2015-8631

    It was discovered that an authenticated attacker can cause kadmind
    to leak memory by supplying a null principal name in a request which
    uses one. Repeating these requests will eventually cause kadmind to
    exhaust all available memory.

For the oldstable distribution (wheezy), these problems have been fixed
in version 1.10.1+dfsg-5+deb7u7. The oldstable distribution (wheezy) is
not affected by CVE-2015-8630.

For the stable distribution (jessie), these problems have been fixed in
version 1.12.1+dfsg-19+deb8u2.

We recommend that you upgrade your krb5 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=X2oA
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=6yiS
-----END PGP SIGNATURE-----