8.1

CVE-2017-11103: apple iphone_os

CVSS: 8.1v3.1HighModified
AliasesALPINE-CVE-2017-11103MGASA-2017-0265MGASA-2017-0326
Published 13-07-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-11103 is a high (CVSS 8.1) vulnerability in apple iphone_os. EPSS estimates a 5.12% chance of exploitation in the next 30 days, higher than 92.2% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.1/10
010
High · v3.1 (NVD)
EPSS score
5.12%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2024:11365-1

Timeline

  1. 13-07-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

5.12%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.12% on 19-09-2026

19-09-202619-10-2026
EPSS score
5.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse6 products
  • resource-agents&distro=SUSE Linux Enterprise High Availability Extension 12 SP3< 4.0.1+git.1495055229.643177f1-2.4.2
  • samba&distro=SUSE Linux Enterprise Desktop 12 SP3< 4.6.7+git.38.90b2cdb4f22-3.7.1
  • samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP3< 4.6.7+git.38.90b2cdb4f22-3.7.1
  • samba&distro=SUSE Linux Enterprise Server 12 SP3< 4.6.7+git.38.90b2cdb4f22-3.7.1
  • samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 4.6.7+git.38.90b2cdb4f22-3.7.1
Debian3 products
  • heimdal< 7.4.0.dfsg.1-1 | < 1.6~rc2+dfsg-9+deb8u1 | < 7.1.0+dfsg-13+deb9u1 | < 1.6~git20120403+dfsg1-2+deb7u1
  • samba< 2:4.6.5+dfsg-4 | < 2:4.2.14+dfsg-0+deb8u7 | < 2:4.5.8+dfsg-2+deb9u1
  • debian_linuxEOL8.0 | 9.0 | 10.0
Mageia3 products
  • heimdal< 1.5.3-6.1.mga5
  • heimdal< 7.3.0-1.1.mga6
  • samba< 4.6.7-1.mga6
Alpine2 products
  • heimdal< 7.4.0-r0 | < 1.6_rc2-r5 | < 1.6_rc2-r6 | < 7.1.0-r1
  • samba≥ 4.0.0, < 4.2.14-r4 | ≥ 4.0.0, < 4.4.14-r1 | ≥ 4.0.0, < 4.5.10-r1 | ≥ 4.0.0, < 4.6.4-r1
Apple2 products
Ubuntu2 products
  • heimdal< 1.6~git20131207+dfsg-1ubuntu1.2 | < 1.7~git20150920+dfsg-4ubuntu1.16.04.1
  • samba< 2:4.3.11+dfsg-0ubuntu0.14.04.10 | < 2:4.3.11+dfsg-0ubuntu0.16.04.9
Freebsd1 product
Heimdal_project1 product
Samba1 product
  • samba≥ 4.0.0, < 4.4.15 | ≥ 4.5.0, < 4.5.12 | ≥ 4.6.0, < 4.6.6

9 vendors · 21 products

References

39 links
Show all 39 references