CVE-2018-16860
Fixed in a distro release EPSS 2%CVSS 7.5
A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
Products: Samba
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | heimdal | 7.5.0-r4 |
| Alpine 3.10 | samba | 4.10.3-r0 |
| Alpine 3.11 | heimdal | 7.5.3-r4 |
| Alpine 3.11 | samba | 4.10.3-r0 |
| Alpine 3.12 | heimdal | 7.5.3-r4 |
| Alpine 3.12 | samba | 4.10.3-r0 |
| Alpine 3.13 | heimdal | 7.5.3-r4 |
| Alpine 3.13 | samba | 4.10.3-r0 |
| Alpine 3.14 | heimdal | 7.5.3-r4 |
| Alpine 3.14 | samba | 4.10.3-r0 |
| Alpine 3.15 | heimdal | 7.5.3-r4 |
| Alpine 3.15 | samba | 4.10.3-r0 |
| Alpine 3.16 | heimdal | 7.5.3-r4 |
| Alpine 3.16 | samba | 4.10.3-r0 |
| Alpine 3.17 | heimdal | 7.5.3-r4 |
| Alpine 3.17 | samba | 4.10.3-r0 |
| Alpine 3.18 | heimdal | 7.5.3-r4 |
| Alpine 3.18 | samba | 4.10.3-r0 |
| Alpine 3.19 | heimdal | 7.5.3-r4 |
| Alpine 3.19 | samba | 4.10.3-r0 |
| Alpine 3.20 | heimdal | 7.5.3-r4 |
| Alpine 3.20 | samba | 4.10.3-r0 |
| Alpine 3.21 | heimdal | 7.5.3-r4 |
| Alpine 3.21 | samba | 4.10.3-r0 |
| Alpine 3.22 | heimdal | 7.5.3-r4 |
| Alpine 3.22 | samba | 4.10.3-r0 |
| Alpine 3.23 | heimdal | 7.5.3-r4 |
| Alpine 3.23 | samba | 4.10.3-r0 |
| Alpine 3.24 | heimdal | 7.5.3-r4 |
| Alpine 3.24 | samba | 4.10.3-r0 |
| Alpine 3.7 | heimdal | 7.4.0-r3 |
| Alpine 3.8 | heimdal | 7.5.0-r2 |
| Alpine 3.8 | samba | 4.8.12-r0 |
| Alpine 3.9 | heimdal | 7.5.0-r3 |
| Alpine 3.9 | samba | 4.8.12-r0 |
| Debian 12 | heimdal | 7.5.0+dfsg-3 |
| Debian 12 | samba | 2:4.9.5+dfsg-4 |
| Debian 13 | heimdal | 7.5.0+dfsg-3 |
| Debian 13 | samba | 2:4.9.5+dfsg-4 |
| Debian 14 | heimdal | 7.5.0+dfsg-3 |
| Debian 14 | samba | 2:4.9.5+dfsg-4 |
| Debian 8 | samba | 2:4.2.14+dfsg-0+deb8u13 |
| Debian 9 | heimdal | 7.1.0+dfsg-13+deb9u3 |
| Debian 9 | samba | 2:4.5.16+dfsg-1+deb9u2 |
| SUSE Package Hub 15 | libheimdal | 7.7.0-bp150.2.3.1 |
| SUSE Package Hub 15 SP1 | libheimdal | 7.7.0-bp151.4.3.1 |
| Ubuntu 16.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.20 |
| Ubuntu 18.04 LTS | heimdal | 7.5.0+dfsg-1ubuntu0.1 |
| Ubuntu 18.04 LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.10 |
| Ubuntu 20.04 LTS | heimdal | 7.7.0+dfsg-1ubuntu1.1 |
| Ubuntu Pro 14.04 LTS | heimdal | 1.6~git20131207+dfsg-1ubuntu1.2+esm1 |
| Ubuntu Pro 14.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1 |
| Ubuntu Pro 16.04 LTS | heimdal | 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1 |
| openSUSE Leap 15.0 | libheimdal | 7.7.0-lp151.3.3.1 |
| openSUSE Leap 15.1 | libheimdal | 7.7.0-lp151.3.3.1 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 |