UBUNTU-CVE-2017-11103

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-11103
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-11103.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2017-11103
Upstream
Downstream
Related
Published
2017-07-13T00:00:00Z
Modified
2025-09-08T16:44:19Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In krb5extractticket() the KDC-REP service name must be obtained from the encrypted version stored in 'encpart' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

References

Affected packages

Ubuntu:14.04:LTS / heimdal

Package

Name
heimdal
Purl
pkg:deb/ubuntu/heimdal@1.6~git20131207+dfsg-1ubuntu1.2?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6~git20131207+dfsg-1ubuntu1.2

Affected versions

1.*

1.6~git20120403+dfsg1-3ubuntu0.1
1.6~git20120403+dfsg1-3ubuntu0.2
1.6~git20131207+dfsg-1ubuntu1
1.6~git20131207+dfsg-1ubuntu1.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "heimdal-clients",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-clients-x",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-dev",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-docs",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-kcm",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-kdc",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-multidev",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-servers",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "heimdal-servers-x",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libasn1-8-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libgssapi3-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libhcrypto4-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libhdb9-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libheimbase1-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libheimntlm0-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libhx509-5-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libkadm5clnt7-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libkadm5srv8-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libkafs0-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libkdc2-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libkrb5-26-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libotp0-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libroken18-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libsl0-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        },
        {
            "binary_name": "libwind0-heimdal",
            "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:14.04:LTS / samba

Package

Name
samba
Purl
pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.10?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.3.11+dfsg-0ubuntu0.14.04.10

Affected versions

2:3.*

2:3.6.18-1ubuntu3

2:4.*

2:4.0.10+dfsg-4ubuntu2
2:4.0.13+dfsg-1ubuntu1
2:4.1.3+dfsg-2ubuntu2
2:4.1.3+dfsg-2ubuntu3
2:4.1.3+dfsg-2ubuntu4
2:4.1.3+dfsg-2ubuntu5
2:4.1.6+dfsg-1ubuntu1
2:4.1.6+dfsg-1ubuntu2
2:4.1.6+dfsg-1ubuntu2.14.04.1
2:4.1.6+dfsg-1ubuntu2.14.04.2
2:4.1.6+dfsg-1ubuntu2.14.04.3
2:4.1.6+dfsg-1ubuntu2.14.04.4
2:4.1.6+dfsg-1ubuntu2.14.04.5
2:4.1.6+dfsg-1ubuntu2.14.04.7
2:4.1.6+dfsg-1ubuntu2.14.04.8
2:4.1.6+dfsg-1ubuntu2.14.04.9
2:4.1.6+dfsg-1ubuntu2.14.04.11
2:4.1.6+dfsg-1ubuntu2.14.04.12
2:4.1.6+dfsg-1ubuntu2.14.04.13
2:4.3.8+dfsg-0ubuntu0.14.04.2
2:4.3.9+dfsg-0ubuntu0.14.04.1
2:4.3.9+dfsg-0ubuntu0.14.04.3
2:4.3.11+dfsg-0ubuntu0.14.04.1
2:4.3.11+dfsg-0ubuntu0.14.04.2
2:4.3.11+dfsg-0ubuntu0.14.04.3
2:4.3.11+dfsg-0ubuntu0.14.04.4
2:4.3.11+dfsg-0ubuntu0.14.04.6
2:4.3.11+dfsg-0ubuntu0.14.04.7
2:4.3.11+dfsg-0ubuntu0.14.04.8
2:4.3.11+dfsg-0ubuntu0.14.04.9

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libpam-smbpass",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libsmbsharemodes-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libsmbsharemodes0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.10"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:16.04:LTS / heimdal

Package

Name
heimdal
Purl
pkg:deb/ubuntu/heimdal@1.7~git20150920+dfsg-4ubuntu1.16.04.1?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.7~git20150920+dfsg-4ubuntu1.16.04.1

Affected versions

1.*

1.6~rc2+dfsg-10ubuntu1
1.7~git20150920+dfsg-4ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "heimdal-clients",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-dev",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-docs",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-kcm",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-kdc",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-multidev",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "heimdal-servers",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libasn1-8-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libgssapi3-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libhcrypto4-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libhdb9-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libheimbase1-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libheimntlm0-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libhx509-5-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libkadm5clnt7-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libkadm5srv8-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libkafs0-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libkdc2-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libkrb5-26-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libotp0-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libroken18-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libsl0-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        },
        {
            "binary_name": "libwind0-heimdal",
            "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:16.04:LTS / samba

Package

Name
samba
Purl
pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.9?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.3.11+dfsg-0ubuntu0.16.04.9

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2
2:4.1.20+dfsg-1ubuntu1
2:4.1.20+dfsg-1ubuntu2
2:4.1.20+dfsg-1ubuntu3
2:4.1.20+dfsg-1ubuntu5
2:4.3.3+dfsg-1ubuntu1
2:4.3.3+dfsg-1ubuntu2
2:4.3.3+dfsg-1ubuntu3
2:4.3.6+dfsg-1ubuntu1
2:4.3.8+dfsg-0ubuntu1
2:4.3.9+dfsg-0ubuntu0.16.04.1
2:4.3.9+dfsg-0ubuntu0.16.04.2
2:4.3.9+dfsg-0ubuntu0.16.04.3
2:4.3.11+dfsg-0ubuntu0.16.04.1
2:4.3.11+dfsg-0ubuntu0.16.04.3
2:4.3.11+dfsg-0ubuntu0.16.04.5
2:4.3.11+dfsg-0ubuntu0.16.04.6
2:4.3.11+dfsg-0ubuntu0.16.04.7
2:4.3.11+dfsg-0ubuntu0.16.04.8

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.9"
        }
    ],
    "availability": "No subscription required"
}