USN-7314-1: Kerberos vulnerabilities
It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. (CVE-2024-26458, CVE-2024-26461) It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-26462) It was discovered that the Kerberos kadmind daemon incorrectly handled log files when incremental propagation was enabled. An authenticated attacker could use this issue to cause kadmind to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-24528)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7314-1?
The severity of USN-7314-1 is significant, as it can lead to denial of service through memory consumption.
How do I fix USN-7314-1?
To fix USN-7314-1, update the affected packages to the recommended versions: 1.21.3-3ubuntu0.2 for Ubuntu 24.10 and 1.20.1-6ubuntu2.5 for Ubuntu 24.04.
What components are affected by USN-7314-1?
The components affected by USN-7314-1 include krb5-admin-server, krb5-kdc, and several libraries such as libgssapi-krb5-2.
Is USN-7314-1 exploitable remotely?
Yes, a remote attacker could potentially exploit the vulnerability in USN-7314-1 to cause a denial of service.
Which Ubuntu versions are affected by USN-7314-1?
USN-7314-1 affects Ubuntu 24.10, 24.04, and earlier versions mentioned in the advisory.