CVE-2017-6594
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
CVE-2017-6594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE List No score
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
CVE-2017-6594- Updated
- 2026-11-02
EUVDEUVD-2017-15648 No score
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
EUVD-2017-15648- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg5g-qq45-3g4q
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
GHSA-jg5g-qq45-3g4q- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSV
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
CVE-2017-6594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-6594
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
DEBIAN-CVE-2017-6594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-6594
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
- Record
UBUNTU-CVE-2017-6594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVMGASA-2017-0308 No score
Updated heimdal packages fix security vulnerability
Transit path validation inadvertently caused the previous hop realm to not be added to the transit path of issued tickets. This may, in some cases, enable bypass of capath policy in Heimdal versions 1.5 through 7.2 (CVE-2017-6594).
Note, this may break sites that rely on the bug. With the bug some incomplete [capaths] worked, that should not have. These may now break authentication in some cross-realm configurations.
- Record
MGASA-2017-0308- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10946-1 No score
libheimdal-7.7.0-1.11 on GA media
These are all security issues fixed in the libheimdal-7.7.0-1.11 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10946-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
heimdalDebian:12 |
before 7.1.0+dfsg-12 | 7.1.0+dfsg-12 |
heimdalDebian:13 |
before 7.1.0+dfsg-12 | 7.1.0+dfsg-12 |
heimdalDebian:14 |
before 7.1.0+dfsg-12 | 7.1.0+dfsg-12 |
heimdalMageia:5 |
before 1.5.3-6.2.mga5 | 1.5.3-6.2.mga5 |
heimdalUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.6~git20120403+dfsg1-3ubuntu0.11.6~git20120403+dfsg1-3ubuntu0.21.6~git20131207+dfsg-1ubuntu11.6~git20131207+dfsg-1ubuntu1.11.6~git20131207+dfsg-1ubuntu1.2 Show 4 moreShow less1.6~git20131207+dfsg-1ubuntu1.2+esm11.6~git20131207+dfsg-1ubuntu1.2+esm21.6~git20131207+dfsg-1ubuntu1.2+esm31.6~git20131207+dfsg-1ubuntu1.2+esm4 |
None known |
heimdalUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.6~rc2+dfsg-10ubuntu11.7~git20150920+dfsg-4ubuntu11.7~git20150920+dfsg-4ubuntu1.16.04.11.7~git20150920+dfsg-4ubuntu1.16.04.1+esm11.7~git20150920+dfsg-4ubuntu1.16.04.1+esm21.7~git20150920+dfsg-4ubuntu1.16.04.1+esm31.7~git20150920+dfsg-4ubuntu1.16.04.1+esm4 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-6594 is a high vulnerability (CVSS 7.5) in Heimdal Project Heimdal, published August 25, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in heimdal 7.1.0+dfsg-12.
References
github.com/heimdal/heimdal/releases/tag/heimdal-7.3.0
lists.opensuse.org/opensuse-updates/2017-08/msg00062.html
h5l.org/advisories.html?show=2017-04-13
nvd.nist.gov/vuln/detail/CVE-2017-6594
Show 10 moreShow less
security-tracker.debian.org/tracker/CVE-2017-6594
advisories.mageia.org/MGASA-2017-0308.html
bugs.mageia.org/show_bug.cgi?id=21550
ubuntu.com/security/CVE-2017-6594
cve.org/CVERecord?id=CVE-2017-6594
suse.com/security/cve/CVE-2017-11103