The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Sep 20, 2017 | Jul 13, 2017 |
| Apple Osx Heimdal | — | Apply OS X security update 2017-004 El CapitanApply OS X security update 2017-001 SierraUpgrade macOS to the latest version | Sep 26, 2017 | Jul 13, 2017 |
| Debian | — | Upgrade sambaUpgrade heimdal | Jul 15, 2017 | Jul 12, 2017 |
| Freebsd | — | Upgrade samba43Upgrade samba44Upgrade samba42Upgrade samba46Upgrade samba45 | Jul 13, 2017 | Jul 12, 2017 |
| Hpux | — | Update CIFS-Server to the latest version | Mar 28, 2022 | Jul 13, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-libs | Feb 22, 2021 | Jul 13, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-python | Sep 28, 2020 | Jul 13, 2017 |
| Samba | — | Upgrade to Samba version 4.5.12Upgrade to Samba version 4.4.15Upgrade to Samba version 4.6.6 | Jul 17, 2017 | Jul 13, 2017 |
| Suse | — | Upgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade libndr-standard0Upgrade libtevent-util-develUpgrade libsmbconf-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr0Upgrade samba-libs-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsamdb-develUpgrade samba-libsUpgrade libnetapi-develUpgrade libsmbclient-develUpgrade libsmbclient0-32bitUpgrade libsamba-hostconfig-develUpgrade libnetapi0-32bitUpgrade libsamba-passdb0Upgrade libdcerpc0Upgrade samba-clientUpgrade samba-kdcUpgrade libsamdb0-32bitUpgrade libsmbclient0Upgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade libwbclient0Upgrade libsmbldap0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr-nbt-develUpgrade libsamba-passdb-develUpgrade libsamba-util0Upgrade libndr1Upgrade libndr0-32bitUpgrade libsamba-util-develUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade libsamba-policy-develUpgrade samba-client-32bitUpgrade libsamba-errors-develUpgrade libdcerpc0-32bitUpgrade libsamba-credentials0-32bitUpgrade ldirectordUpgrade libndr-krb5pac0Upgrade libdcerpc-binding0Upgrade libsmbldap-develUpgrade samba-pythonUpgrade libtevent-util0Upgrade libsamba-errors0Upgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr0Upgrade libndr-standard0-32bitUpgrade libndr-develUpgrade sambaUpgrade libwbclient-develUpgrade libsmbconf0-32bitUpgrade libsmbldap2-32bitUpgrade monitoring-plugins-metadataUpgrade libtevent-util0-32bitUpgrade samba-docUpgrade samba-python3Upgrade samba-core-develUpgrade samba-libs-python3-32bitUpgrade samba-cephUpgrade libndr1-32bitUpgrade libdcerpc-develUpgrade libwbclient0-32bitUpgrade samba-dsdb-modulesUpgrade samba-libs-python3Upgrade resource-agentsUpgrade libsmbldap0Upgrade libsamba-passdb0-32bitUpgrade libndr-nbt0Upgrade libsamba-credentials-develUpgrade libnetapi0Upgrade libsamba-policy0Upgrade samba-winbindUpgrade libsmbconf0Upgrade samba-winbind-32bit | Aug 17, 2017 | Jul 12, 2017 |
| Ubuntu | — | Upgrade libsmbclientUpgrade libkrb5-26-heimdalUpgrade samba-libs | Jul 15, 2017 | Jul 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub