CVE-2017-11368

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11368
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11368.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11368
Downstream
Related
Published
2017-08-09T18:29:01Z
Modified
2026-05-13T12:00:44Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpe":  "cpe:2.3:a:mit:kerberos:5-1.13.7:*:*:*:*:*:*:*",
            "extracted_events":  [
                {
                    "last_affected":  "5-1.13.7"
                }
            ],
            "source":  "CPE_FIELD"
        },
        {
            "cpe":  "cpe:2.3:a:mit:kerberos_5:1.15.1:beta1:*:*:*:*:*:*",
            "extracted_events":  [
                {
                    "last_affected":  "1.15.1-beta1"
                }
            ],
            "source":  "CPE_FIELD"
        },
        {
            "cpe":  "cpe:2.3:a:mit:kerberos_5:1.15.1:beta2:*:*:*:*:*:*",
            "extracted_events":  [
                {
                    "last_affected":  "1.15.1-beta2"
                }
            ],
            "source":  "CPE_FIELD"
        },
        {
            "cpe":  "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
            "extracted_events":  [
                {
                    "last_affected":  "25"
                }
            ],
            "source":  "CPE_FIELD"
        },
        {
            "cpe":  "cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*",
            "extracted_events":  [
                {
                    "last_affected":  "26"
                }
            ],
            "source":  "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/krb5/krb5

Affected ranges

Type
GIT
Repo
https://github.com/krb5/krb5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
f70e5ec1adf2f54da8be987c5af0b29fa82ddfc6
Last Affected
181076092eda2125017838dad9084b38bb00e8c1
Last Affected
83758c28e976230ce11df1db51ccee7166b89110
Last Affected
1a9bff0e359a3642d047108d205365b2c799954e
Last Affected
bf40ae5edb0845847d7897cedc3656301c8423bb
Last Affected
9dc62c313469d13e956f7f9d1d5431e225cd5ff1
Last Affected
549da09a42c313b6c99e011a79fa5eed2eda0169
Last Affected
9524d8b0cca2b05c71402eb6335629dd3cf2de4c
Last Affected
13c770a0a3a63afda724495623286b04b0da7b12
Last Affected
0bd2c55c2f1a069079f72bcfb0e9b2f85c26809a
Last Affected
ab5072dfe34986cd26bcbf4b780f5ca1e02aa0a3
Last Affected
e3156212f7dd3ecf8cded42fe0ed4552d3c4f355
Last Affected
0611f76795294dc24b2706fbb69fd4f2613b416b
Last Affected
4480b5ec7aa6c838706724a071a22f98b066990b
Last Affected
dcd12370323aeb27acbb7a0498cd61df71bd70d7
Last Affected
cd4f6bfa01ba58232a6afab7e4cb4346cb2c7734
Last Affected
877bdca7a323b0bc33c3c1b21f99a7655f7a7a2c
Last Affected
3e6139176d8f3dfc92a19a938b87adc1d49e216b
Last Affected
625d2314ba391ee787d4783ba2ec0d34473b373e
Last Affected
af092d6b82733459f0071d22da6926859c25ab8f
Last Affected
da9dc1bbc92884e1c7f817928176d9043f0ada34
Last Affected
cdddd9ccb3b4ab14bd5f25429a880564222b629a
Last Affected
c538c54695ff40952873d6723066c3aa55893f27
Last Affected
42f69d022e61dd267a57fadfc5c50cdfd57090ac
Last Affected
7a65ad671634093af6df120d93056d6e40e026ad
Last Affected
d53075c8d470db496ab4a2825a80914980a84a61
Last Affected
7df6bce331e6669d1825061c76dba5c3dad86733
Last Affected
64fca7954952bc0d177bb14de4b363b1041db1d7
Last Affected
a956edbc87735c8c8f6df2dbddd1c0f75020e2a5
Last Affected
3165ae71ba685ff0f105383a2c2a27a76e8efac4
Last Affected
2f5d3144379e251cb13797b92d47153e1ab51181
Last Affected
7e4e051e3d2ebc06161475a42ded72c944308539
Last Affected
233f46816c44bfa974d1d1092426ed7f8616991d
Last Affected
1f78e158286d7cfce58fcf8dd482d81adfa3259c
Last Affected
68237c615782cc5fd0bc372e1fa24426399ab520
Last Affected
48401c2c17364ebd90d3422d01a159ca16ea9548
Last Affected
4b6ba67f51b8723f53bcf7a532fedfda66f4bdbb
Last Affected
f5ab3b3b18b7373ddfbcc2c2bd9cbe2b333f0203
Last Affected
102087ab0ce9f8661be09f905ca546c4d471bac5
Last Affected
feb36cf045c4ecb5b3f0da04a86a85f2fdbf71a5
Last Affected
68a03305111126a183dbd3779497ed9e00be6e0a
Last Affected
3a3e096c07eefcb889f6c330f271a322e29c246a
Last Affected
da9c3ecfae66d2d61c9f22f3d4d2a4d643cfd9c8
Last Affected
747204921f955bf8239f86c7f5490ff5af426836
Last Affected
3051931836c20208100b8f9d938145c6c5c702e8
Last Affected
b9ad6c49505c96a088326b62a52568e3484f2168
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.8.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.9.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.9.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.9.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.9.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.10.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.10.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.10.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.10.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.11.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.12.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.12.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.12.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.13.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.14.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:mit:kerberos_5:1.15.1:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "1.7"
        },
        {
            "last_affected":  "1.7.1"
        },
        {
            "last_affected":  "1.8"
        },
        {
            "last_affected":  "1.8.1"
        },
        {
            "last_affected":  "1.8.2"
        },
        {
            "last_affected":  "1.8.3"
        },
        {
            "last_affected":  "1.8.4"
        },
        {
            "last_affected":  "1.8.5"
        },
        {
            "last_affected":  "1.8.6"
        },
        {
            "last_affected":  "1.9"
        },
        {
            "last_affected":  "1.9.1"
        },
        {
            "last_affected":  "1.9.2"
        },
        {
            "last_affected":  "1.9.3"
        },
        {
            "last_affected":  "1.9.4"
        },
        {
            "last_affected":  "1.10"
        },
        {
            "last_affected":  "1.10.1"
        },
        {
            "last_affected":  "1.10.2"
        },
        {
            "last_affected":  "1.10.3"
        },
        {
            "last_affected":  "1.10.4"
        },
        {
            "last_affected":  "1.11"
        },
        {
            "last_affected":  "1.11.1"
        },
        {
            "last_affected":  "1.11.2"
        },
        {
            "last_affected":  "1.11.3"
        },
        {
            "last_affected":  "1.11.4"
        },
        {
            "last_affected":  "1.11.5"
        },
        {
            "last_affected":  "1.12"
        },
        {
            "last_affected":  "1.12.1"
        },
        {
            "last_affected":  "1.12.2"
        },
        {
            "last_affected":  "1.12.3"
        },
        {
            "last_affected":  "1.13"
        },
        {
            "last_affected":  "1.13.1"
        },
        {
            "last_affected":  "1.13.2"
        },
        {
            "last_affected":  "1.13.3"
        },
        {
            "last_affected":  "1.13.5"
        },
        {
            "last_affected":  "1.13.6"
        },
        {
            "last_affected":  "1.14"
        },
        {
            "last_affected":  "1.14-alpha1"
        },
        {
            "last_affected":  "1.14-beta1"
        },
        {
            "last_affected":  "1.14-beta2"
        },
        {
            "last_affected":  "1.14.1"
        },
        {
            "last_affected":  "1.14.2"
        },
        {
            "last_affected":  "1.14.3"
        },
        {
            "last_affected":  "1.14.4"
        },
        {
            "last_affected":  "1.14.5"
        },
        {
            "last_affected":  "1.15"
        },
        {
            "last_affected":  "1.15.1"
        }
    ],
    "source":  "CPE_FIELD"
}

Affected versions

kfw-4.*
kfw-4.0-final
kfw-4.0.1-beta1
kfw-4.0.1-final
kfw-4.1-beta1
kfw-4.1-beta2
kfw-4.1-beta3
kfw-4.1-beta3-mit
krb5-1.*
krb5-1.10-final
krb5-1.10.1-final
krb5-1.10.2-final
krb5-1.10.3-final
krb5-1.10.4-final
krb5-1.11-alpha1
krb5-1.11-beta1
krb5-1.11-beta2
krb5-1.11-final
krb5-1.11.1-final
krb5-1.11.2-final
krb5-1.11.3-final
krb5-1.11.4-final
krb5-1.11.5-final
krb5-1.12-alpha1
krb5-1.12-beta1
krb5-1.12-beta2
krb5-1.12-final
krb5-1.12.1-final
krb5-1.12.2-final
krb5-1.12.3-final
krb5-1.13-alpha1
krb5-1.13-beta1
krb5-1.13-final
krb5-1.13.1-final
krb5-1.13.2-final
krb5-1.13.3-final
krb5-1.13.4-final
krb5-1.13.5-final
krb5-1.13.6-final
krb5-1.14-alpha1
krb5-1.14-beta1
krb5-1.14-beta2
krb5-1.14-final
krb5-1.14.1-final
krb5-1.14.2-final
krb5-1.14.3-final
krb5-1.14.4-final
krb5-1.14.5-final
krb5-1.15-beta1
krb5-1.15-beta2
krb5-1.15-final
krb5-1.15.1-final
krb5-1.7-final
krb5-1.7.1-final
krb5-1.8-final
krb5-1.8.1-final
krb5-1.8.2-final
krb5-1.8.3-final
krb5-1.8.4-final
krb5-1.8.5-final
krb5-1.8.6-final
krb5-1.9-final
krb5-1.9.1-final
krb5-1.9.2-final
krb5-1.9.3-final
krb5-1.9.4-final

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11368.json"