{"id":"CVE-2017-11103","aliases":["ALPINE-CVE-2017-11103","BELL-CVE-2017-11103","DEBIAN-CVE-2017-11103","DLA-1027-1","DSA-3909-1","DSA-3912-1","EUVD-2017-2740","GHSA-7cm4-q9wm-9w5g","MGASA-2017-0265","MGASA-2017-0326","SUSE-SU-2017:2237-1","UBUNTU-CVE-2017-11103","USN-3353-1","USN-3353-2","openSUSE-SU-2024:10946-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks...","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05118,"percentile":0.92434,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-345"],"published":"2017-07-13T00:00:00Z","modified":"2026-10-24T10:47:23Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"heimdal","fixed_in":["1.6_rc2-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"heimdal","fixed_in":["1.6_rc2-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"heimdal","fixed_in":["1.6_rc2-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"heimdal","fixed_in":["7.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"heimdal","fixed_in":["7.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"samba","fixed_in":["4.2.14-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"samba","fixed_in":["4.4.14-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"samba","fixed_in":["4.5.10-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"samba","fixed_in":["4.6.4-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"heimdal","fixed_in":["7.4.0.dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"heimdal","fixed_in":["7.4.0.dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"heimdal","fixed_in":["7.4.0.dfsg.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.6.5+dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.6.5+dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.6.5+dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"heimdal","fixed_in":["1.6~git20120403+dfsg1-2+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"samba","fixed_in":["2:4.2.14+dfsg-0+deb8u7"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"samba","fixed_in":["2:4.5.8+dfsg-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"heimdal","fixed_in":["1.6~rc2+dfsg-9+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"heimdal","fixed_in":["7.1.0+dfsg-13+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"heimdal","fixed_in":["1.5.3-6.1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"heimdal","fixed_in":["7.3.0-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"samba","fixed_in":["4.6.7-1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"samba","fixed_in":["4.6.7+git.38.90b2cdb4f22-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"resource-agents","fixed_in":["4.0.1+git.1495055229.643177f1-2.4.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"samba","fixed_in":["4.6.7+git.38.90b2cdb4f22-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"samba","fixed_in":["4.6.7+git.38.90b2cdb4f22-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"samba","fixed_in":["4.6.7+git.38.90b2cdb4f22-3.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"samba","fixed_in":["4.6.7+git.38.90b2cdb4f22-3.7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"heimdal","fixed_in":["1.6~git20131207+dfsg-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.14.04.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"heimdal","fixed_in":["1.7~git20150920+dfsg-4ubuntu1.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6_rc2-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6_rc2-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6_rc2-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.2.14-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.4.14-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.5.10-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.6.4-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0.dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0.dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.0.dfsg.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.5+dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.5+dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.5+dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20120403+dfsg1-2+deb7u1"}]}],"versions":["1.6~git20120403+dfsg1-2"]},{"source":"osv","ecosystem":"Debian:8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.14+dfsg-0+deb8u7"}]}],"versions":["2:4.1.17+dfsg-2","2:4.1.17+dfsg-2+deb8u1","2:4.1.17+dfsg-2+deb8u2","2:4.1.17+dfsg-3","2:4.1.17+dfsg-4","2:4.1.17+dfsg-5","2:4.1.20+dfsg-1","2:4.1.21+dfsg-1","2:4.1.21+dfsg-2","2:4.1.22+dfsg-1","2:4.2.1+dfsg-1","2:4.2.10+dfsg-0+deb8u1","2:4.2.10+dfsg-0+deb8u2","2:4.2.10+dfsg-0+deb8u3","2:4.2.14+dfsg-0+deb8u1","2:4.2.14+dfsg-0+deb8u2","2:4.2.14+dfsg-0+deb8u3","2:4.2.14+dfsg-0+deb8u4","2:4.2.14+dfsg-0+deb8u5","2:4.2.14+dfsg-0+deb8u6"]},{"source":"osv","ecosystem":"Debian:9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.5.8+dfsg-2+deb9u1"}]}],"versions":["2:4.5.8+dfsg-2"]},{"source":"osv","ecosystem":"Debian:8","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~rc2+dfsg-9+deb8u1"}]}],"versions":["1.6~rc2+dfsg-9"]},{"source":"osv","ecosystem":"Debian:9","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0+dfsg-13+deb9u1"}]}],"versions":["7.1.0+dfsg-13"]},{"source":"osv","ecosystem":"Mageia:5","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-6.1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7-1.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7+git.38.90b2cdb4f22-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1+git.1495055229.643177f1-2.4.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7+git.38.90b2cdb4f22-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7+git.38.90b2cdb4f22-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7+git.38.90b2cdb4f22-3.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.7+git.38.90b2cdb4f22-3.7.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.10"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.9"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.10"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.9"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"debian","product":"debian_linux"},{"vendor":"freebsd","product":"freebsd"},{"vendor":"heimdal_project","product":"heimdal"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3912","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT208144","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.orpheus-lyre.info/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","Third Party Advisory","advisory","report"]},{"url":"http://www.securityfocus.com/bid/99551","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1039427","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2017-11103.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","report"]},{"url":"http://www.securitytracker.com/id/1038876","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://support.apple.com/HT208112","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/heimdal/heimdal/releases/tag/heimdal-7.4.0","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory","report"]},{"url":"http://www.h5l.org/advisories.html?show=2017-07-11","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11103"},{"url":"https://www.orpheus-lyre.info"},{"url":"https://github.com/advisories/GHSA-7cm4-q9wm-9w5g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-11103","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-11103","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-11103","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0265.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21243","tags":["report"]},{"url":"https://usn.ubuntu.com/usn/usn-3353-1/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0326.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21482","tags":["report"]},{"url":"https://www.samba.org/samba/history/samba-4.6.6.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.6.7.html","tags":["web"]},{"url":"https://usn.ubuntu.com/usn/usn-3353-2/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172237-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1048278","tags":["report"]},{"url":"https://bugzilla.suse.com/1048339","tags":["report"]},{"url":"https://bugzilla.suse.com/1048352","tags":["report"]},{"url":"https://bugzilla.suse.com/1048387","tags":["report"]},{"url":"https://bugzilla.suse.com/1048790","tags":["report"]},{"url":"https://bugzilla.suse.com/1052577","tags":["report"]},{"url":"https://bugzilla.suse.com/1054017","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-11103","tags":["report"]},{"url":"https://orpheus-lyre.info/","tags":["report"]},{"url":"https://github.com/heimdal/heimdal/commit/6dd3eb836bbb80a00ffced4ad57077a1cdf227ea","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3353-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3353-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3353-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3353-4","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11103","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:00:00Z","modified":"2024-08-05T17:57:57.836Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-2740","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:00:00Z","modified":"2024-08-05T17:57:57Z","updated_at":"2026-11-03T02:23:24.743229Z"}],"ghsa":[{"id":"GHSA-7cm4-q9wm-9w5g","title":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks...","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2022-05-13T01:23:19Z","modified":"2025-04-20T03:40:41Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T15:01:48.455381Z"}],"nvd":[{"id":"CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:29:00.173Z","modified":"2026-06-17T01:01:13.38Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"ALPINE-CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:29:00.173Z","modified":"2026-07-08T04:31:09.402454714Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-11103","title":"CVE-2017-11103 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:06.53171Z","modified":"2026-01-26T09:45:45.949886Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:29:00.173Z","modified":"2026-10-24T10:47:23.576252552Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T13:29:00.173Z","modified":"2026-09-01T20:03:41.126427885Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-11103","description":"Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","status":"published","published":"2017-07-13T00:00:00Z","modified":"2026-04-22T11:10:35.495934Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1027-1","title":"heimdal - security update","status":"published","published":"2017-07-14T00:00:00Z","modified":"2026-03-09T01:01:29.687383Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3909-1","title":"samba - security update","status":"published","published":"2017-07-14T00:00:00Z","modified":"2026-03-09T01:19:59.868561Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3912-1","title":"heimdal - security update","status":"published","published":"2017-07-16T00:00:00Z","modified":"2026-03-09T01:20:20.541963Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0265","title":"Updated heimdal packages fix security vulnerability","description":"Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that\nHeimdal clients incorrectly trusted unauthenticated portions of Kerberos\ntickets. A remote attacker could use this to impersonate trusted network\nservices or perform other attacks (CVE-2017-11103).\n","status":"published","published":"2017-08-13T13:36:42Z","modified":"2026-04-16T06:26:10.534216632Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0326","title":"Updated samba packages fix security vulnerability","description":"Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that\nSamba clients incorrectly trusted unauthenticated portions of Kerberos\ntickets. A remote attacker could use this to impersonate trusted network\nservers or perform other attacks (CVE-2017-11103).\n\nThe samba package has been updated to version 4.6.7, fixing this issue\nand several other bugs.\n","status":"published","published":"2017-09-03T14:31:33Z","modified":"2026-04-16T06:26:13.422846121Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10946-1","title":"libheimdal-7.7.0-1.11 on GA media","description":"These are all security issues fixed in the libheimdal-7.7.0-1.11 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:00:42.084229Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2017:2237-1","title":"Security update for samba and resource-agents","description":"This update provides Samba 4.6.7, which fixes the following issues:\n\n- CVE-2017-11103: Metadata were being taken from the unauthenticated plaintext (the Ticket)\n  rather than the authenticated and encrypted KDC response. (bsc#1048278)\n- Fix cephwrap_chdir(). (bsc#1048790)\n- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb. (bsc#1048339)\n- Fix inconsistent ctdb socket path. (bsc#1048352)\n- Fix non-admin cephx authentication. (bsc#1048387)\n- CTDB cannot start when there is no persistent database. (bsc#1052577)\n\nThe CTDB resource agent was also fixed to not fail when the database is empty.\n","status":"published","published":"2017-08-22T14:49:15Z","modified":"2026-02-04T03:55:32.926235Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3353-1","title":"heimdal vulnerability","description":"Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered\nthat Heimdal clients incorrectly trusted unauthenticated portions\nof Kerberos tickets. A remote attacker could use this to impersonate\ntrusted network services or perform other attacks.\n","status":"published","published":"2017-07-14T19:36:52Z","modified":"2026-04-22T09:36:29.967783Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3353-2","title":"samba vulnerability","description":"USN-3353-1 fixed a vulnerability in Heimdal. This update provides\nthe corresponding update for Samba.\n\nJeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered\nthat Samba clients incorrectly trusted unauthenticated portions of\nKerberos tickets. A remote attacker could use this to impersonate\ntrusted network servers or perform other attacks.\n","status":"published","published":"2017-07-14T19:42:50Z","modified":"2026-04-22T09:37:17.33535Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}