Unscored USN-4314-1 1 CVE

libpam-krb5 vulnerability

Published Mar 31, 2020 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

Russ Allbery discovered that pam-krb5 incorrectly handled some responses.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	libpam-krb5	4.7-2ubuntu0.1
Ubuntu · 18.04 LTS 18.04:LTS	libpam-krb5	4.8-1ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	libpam-krb5	4.6-2ubuntu0.1~esm1

Vulnerabilities 1

Unscored —

CVE-2020-10595

pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental p…

libpam-krb5 libpam-krb5 Debian Ubuntu

Mar 31, 2020

References

report
https://ubuntu.com/security/CVE-2020-10595