1. Ubuntu Security Notices
  2. USN-3353-1

USN-3353-1: Heimdal vulnerability

Publication date

14 July 2017

Overview

Heimdal could allow unintended access to network services.

Releases

Packages

  • heimdal - Heimdal Kerberos Network Authentication Protocol

Details

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
that Heimdal clients incorrectly trusted unauthenticated portions
of Kerberos tickets. A remote attacker could use this to impersonate
trusted network services or perform other attacks.

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
that Heimdal clients incorrectly trusted unauthenticated portions
of Kerberos tickets. A remote attacker could use this to impersonate
trusted network services or perform other attacks.

Update instructions

After a standard system update you need to restart any applications using Heimdal libraries to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
17.04 zesty libkrb5-26-heimdal –  7.1.0+dfsg-9ubuntu1.1
16.10 yakkety libkrb5-26-heimdal –  1.7~git20150920+dfsg-4ubuntu1.16.10.1
16.04 xenial libkrb5-26-heimdal –  1.7~git20150920+dfsg-4ubuntu1.16.04.1
14.04 trusty libkrb5-26-heimdal –  1.6~git20131207+dfsg-1ubuntu1.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›