In MIT krb5 release 1.7 and later with incremental propagation enabled, an authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process crash.
{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "krb5-user",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libgssrpc4",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkadm5clnt-mit11",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkadm5srv-mit11",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkdb5-9",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkrad0",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.17-6ubuntu4.9"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.17-6ubuntu4.9"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "krb5-user",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libgssrpc4",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkadm5clnt-mit12",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkadm5srv-mit12",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkdb5-10",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkrad0",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.19.2-2ubuntu0.6"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.19.2-2ubuntu0.6"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "krb5-user",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libgssrpc4t64",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkadm5clnt-mit12",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkadm5srv-mit12",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkdb5-10t64",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkrad0",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.20.1-6ubuntu2.5"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.20.1-6ubuntu2.5"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-user",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libgssrpc4t64",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkadm5clnt-mit12",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkadm5srv-mit12",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkdb5-10t64",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrad0",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.21.3-4ubuntu2"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "krb5-user",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libgssrpc4t64",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkadm5clnt-mit12",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkadm5srv-mit12",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkdb5-10t64",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrad0",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.21.3-4ubuntu2"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.21.3-4ubuntu2"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "krb5-user",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libgssrpc4",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkadm5clnt-mit9",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkadm5srv-mit8",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkadm5srv-mit9",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkdb5-7",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkrad0",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.12+dfsg-2ubuntu5.4+esm7"
}
]
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "krb5-user",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libgssrpc4",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkadm5clnt-mit9",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkadm5srv-mit9",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkdb5-8",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkrad0",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.13.2+dfsg-5ubuntu2.2+esm7"
}
]
}{
"binaries": [
{
"binary_name": "krb5-admin-server",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-gss-samples",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-k5tls",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-kdc",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-kdc-ldap",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-kpropd",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-locales",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-multidev",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-otp",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-pkinit",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "krb5-user",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libgssapi-krb5-2",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libgssrpc4",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libk5crypto3",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkadm5clnt-mit11",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkadm5srv-mit11",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkdb5-9",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkrad-dev",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkrad0",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkrb5-3",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkrb5-dev",
"binary_version": "1.16-2ubuntu0.4+esm5"
},
{
"binary_name": "libkrb5support0",
"binary_version": "1.16-2ubuntu0.4+esm5"
}
]
}