CVE-2017-11368

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
mitkerberos
5-1.13.7
mitkerberos_5
1.7
mitkerberos_5
1.7.1
mitkerberos_5
1.8
mitkerberos_5
1.8.1
mitkerberos_5
1.8.2
mitkerberos_5
1.8.3
mitkerberos_5
1.8.4
mitkerberos_5
1.8.5
mitkerberos_5
1.8.6
mitkerberos_5
1.9
mitkerberos_5
1.9.1
mitkerberos_5
1.9.2
mitkerberos_5
1.9.3
mitkerberos_5
1.9.4
mitkerberos_5
1.10
mitkerberos_5
1.10.1
mitkerberos_5
1.10.2
mitkerberos_5
1.10.3
mitkerberos_5
1.10.4
mitkerberos_5
1.11
mitkerberos_5
1.11.1
mitkerberos_5
1.11.2
mitkerberos_5
1.11.3
mitkerberos_5
1.11.4
mitkerberos_5
1.11.5
mitkerberos_5
1.12
mitkerberos_5
1.12.1
mitkerberos_5
1.12.2
mitkerberos_5
1.12.3
mitkerberos_5
1.13
mitkerberos_5
1.13.1
mitkerberos_5
1.13.2
mitkerberos_5
1.13.3
mitkerberos_5
1.13.5
mitkerberos_5
1.13.6
mitkerberos_5
1.14
mitkerberos_5
1.14:alpha1
mitkerberos_5
1.14:beta1
mitkerberos_5
1.14:beta2
mitkerberos_5
1.14.1
mitkerberos_5
1.14.2
mitkerberos_5
1.14.3
mitkerberos_5
1.14.4
mitkerberos_5
1.14.5
mitkerberos_5
1.15
mitkerberos_5
1.15.1
mitkerberos_5
1.15.1:beta1
mitkerberos_5
1.15.1:beta2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
krb5
bookworm
1.20.1-2+deb12u2
fixed
bookworm (security)
1.20.1-2+deb12u2
fixed
bullseye
1.18.3-6+deb11u5
fixed
bullseye (security)
1.18.3-6+deb11u5
fixed
sid
1.21.3-3
fixed
trixie
1.21.3-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
krb5
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
trusty
Fixed 1.12+dfsg-2ubuntu5.4
released
xenial
Fixed 1.13.2+dfsg-5ubuntu2.1
released
zesty
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
krb5
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-32bit
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-client
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-devel
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-kdb-ldap
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-otp
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-pkinit
suse enterprise desktop 15
1.15.2-4.25
fixed
suse enterprise desktop 15 SP1
1.16.3-1.16
fixed
suse enterprise desktop 15 SP2
1.16.3-3.6.1
fixed
suse enterprise desktop 15 SP3
1.16.3-3.15.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-server
suse enterprise sap 15
1.15.2-4.25
fixed
suse enterprise sap 15 SP1
1.16.3-1.16
fixed
suse enterprise sap 15 SP2
1.16.3-3.6.1
fixed
suse enterprise sap 15 SP3
1.16.3-3.15.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-4.25
fixed
suse enterprise server 15 SP1
1.16.3-1.16
fixed
suse enterprise server 15 SP2
1.16.3-3.6.1
fixed
suse enterprise server 15 SP3
1.16.3-3.15.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.1.9
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
krb5-devel
RHEL 7
0:1.15.1-18.el7
fixed
krb5-libs
RHEL 7
0:1.15.1-18.el7
fixed
krb5-pkinit
RHEL 7
0:1.15.1-18.el7
fixed
krb5-server
RHEL 7
0:1.15.1-18.el7
fixed
krb5-server-ldap
RHEL 7
0:1.15.1-18.el7
fixed
krb5-workstation
RHEL 7
0:1.15.1-18.el7
fixed
libkadm5
RHEL 7
0:1.15.1-18.el7
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/100291
https://access.redhat.com/errata/RHSA-2018:0666
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/
http://www.securityfocus.com/bid/100291
https://access.redhat.com/errata/RHSA-2018:0666
https://github.com/krb5/krb5/commit/ffb35baac6981f9e8914f8f3bffd37f284b85970
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4HNWXM6OQU7G23MG7XWIOBRGP43ECLDT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBUTXMNZWMVJLQ4NDX5OQFPUVCJRLV3W/