CVE-2012-1015

Publication date 31 July 2012

Last updated 24 July 2024

Ubuntu priority

The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
krb5	12.04 LTS precise	Fixed 1.10+dfsg~beta1-2ubuntu0.3
	11.10 oneiric	Fixed 1.9.1+dfsg-1ubuntu2.3
	11.04 natty	Fixed 1.8.3+dfsg-5ubuntu2.3
	10.04 LTS lucid	Fixed 1.8.1+dfsg-2ubuntu0.11
	8.04 LTS hardy	Not affected

Notes

sbeattie

krb5 1.8 and newer code execution potential probably blocked by glibc double-free detection

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
krb5	Upstream: http://web.mit.edu/kerberos/advisories/2012-001-patch.txt

References

Related Ubuntu Security Notices (USN)