CVE-2017-6594
CVE-2017-6594
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
CVSS 7.5 · High · EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
heimdal Debian:12
- Affected ranges
- ECOSYSTEM: < 7.1.0+dfsg-12
Update to 7.1.0+dfsg-12
heimdal Debian:13
- Affected ranges
- ECOSYSTEM: < 7.1.0+dfsg-12
Update to 7.1.0+dfsg-12
heimdal Debian:14
- Affected ranges
- ECOSYSTEM: < 7.1.0+dfsg-12
Update to 7.1.0+dfsg-12
heimdal Ubuntu:Pro:14.04:LTS
- Versions
- 1.6~git20120403+dfsg1-3ubuntu0.1
- 1.6~git20120403+dfsg1-3ubuntu0.2
- 1.6~git20131207+dfsg-1ubuntu1
- 1.6~git20131207+dfsg-1ubuntu1.1
- 1.6~git20131207+dfsg-1ubuntu1.2
- 1.6~git20131207+dfsg-1ubuntu1.2+esm1
- 1.6~git20131207+dfsg-1ubuntu1.2+esm2
- 1.6~git20131207+dfsg-1ubuntu1.2+esm3
- 1.6~git20131207+dfsg-1ubuntu1.2+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
heimdal Ubuntu:Pro:16.04:LTS
- Versions
- 1.6~rc2+dfsg-10ubuntu1
- 1.7~git20150920+dfsg-4ubuntu1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/heimdal/heimdal/releases/tag/heimdal-7.3.0
- http://lists.opensuse.org/opensuse-updates/2017-08/msg00062.html
- http://www.h5l.org/advisories.html?show=2017-04-13
- https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837
- https://nvd.nist.gov/vuln/detail/CVE-2017-6594