CVE-2018-20217
Fixed in a distro release EPSS 1%
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
Products: mit kerberos, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | krb5 | 1.15.4-r0 |
| Alpine 3.11 | krb5 | 1.15.4-r0 |
| Alpine 3.12 | krb5 | 1.15.4-r0 |
| Alpine 3.13 | krb5 | 1.15.4-r0 |
| Alpine 3.14 | krb5 | 1.15.4-r0 |
| Alpine 3.15 | krb5 | 1.15.4-r0 |
| Alpine 3.16 | krb5 | 1.15.4-r0 |
| Alpine 3.17 | krb5 | 1.15.4-r0 |
| Alpine 3.18 | krb5 | 1.15.4-r0 |
| Alpine 3.19 | krb5 | 1.15.4-r0 |
| Alpine 3.20 | krb5 | 1.15.4-r0 |
| Alpine 3.21 | krb5 | 1.15.4-r0 |
| Alpine 3.22 | krb5 | 1.15.4-r0 |
| Alpine 3.23 | krb5 | 1.15.4-r0 |
| Alpine 3.24 | krb5 | 1.15.4-r0 |
| Alpine 3.6 | krb5 | 1.14.3-r3 |
| Alpine 3.7 | krb5 | 1.15.4-r0 |
| Alpine 3.8 | krb5 | 1.15.4-r0 |
| Alpine 3.9 | krb5 | 1.15.4-r0 |
| Debian 12 | krb5 | 1.16.2-1 |
| Debian 13 | krb5 | 1.16.2-1 |
| Debian 14 | krb5 | 1.16.2-1 |
| Debian 8 | krb5 | 1.12.1+dfsg-19+deb8u5 |
| Debian 9 | krb5 | 1.15-1+deb9u3 |
| Red Hat Enterprise Linux 7 | krb5 | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-debuginfo | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-devel | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-libs | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-pkinit | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-server | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-server-ldap | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | krb5-workstation | 0:1.15.1-37.el7_7.2 |
| Red Hat Enterprise Linux 7 | libkadm5 | 0:1.15.1-37.el7_7.2 |
| SUSE Enterprise Storage 4 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | krb5 | 1.12.1-38.13.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server 12 SP3 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server 12 SP4 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server 12-LTSS | krb5 | 1.12.1-38.13.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | krb5 | 1.12.1-38.13.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | krb5 | 1.12.5-40.31.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | krb5 | 1.12.5-40.31.1 |
| SUSE OpenStack Cloud 7 | krb5 | 1.12.5-40.31.1 |
| Ubuntu 18.04 LTS | krb5 | 1.16-2ubuntu0.3 |
| Ubuntu 20.04 LTS | krb5 | 1.17-6ubuntu4.2 |
| Ubuntu 22.04 LTS | krb5 | 1.19.2-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | krb5 | 1.12+dfsg-2ubuntu5.4+esm1 |
| Ubuntu Pro 14.04 LTS | krb5 | 1.12+dfsg-2ubuntu5.4+esm3 |
| Ubuntu Pro 16.04 LTS | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm3 |
| openSUSE Leap 15.0 | krb5 | 1.15.2-lp150.5.3.1 |
| openSUSE Leap 15.0 | krb5-mini | 1.15.2-lp150.5.3.1 |
| openSUSE Tumbleweed | krb5 | 1.19.2-3.1 |