{
  "cveId": "CVE-2018-16860",
  "url": "https://patchblox.com/security/cve/CVE-2018-16860",
  "summary": "CVE-2018-16860 is fixed in 39 products on 1 platform, first by ctdb 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10, released May 13, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ctdb: A flaw was found in samba\u0027s Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excludin...",
  "description": "A flaw was found in samba\u0027s Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.",
  "published": "2019-05-13T17:00:00Z",
  "severity": "Medium",
  "epss": 0.02486,
  "epssPercentile": 0.84716,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ctdb",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "ctdb 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ctdb-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-clients",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-clients 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-clients-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-docs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-docs 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-docs-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-kcm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-kcm 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-kcm-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-kdc",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-kdc 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-kdc-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-multidev",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-multidev 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-multidev-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-servers",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-servers 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-servers-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libasn1-8-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libasn1-8-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libasn1-8-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgssapi3-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libgssapi3-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libgssapi3-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhcrypto4-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhcrypto4-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhcrypto4-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhdb9-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhdb9-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhdb9-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libheimbase1-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libheimbase1-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libheimbase1-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libheimntlm0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libheimntlm0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libheimntlm0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhx509-5-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhx509-5-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhx509-5-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkadm5clnt7-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkadm5clnt7-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkadm5clnt7-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkadm5srv8-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkadm5srv8-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkadm5srv8-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkafs0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkafs0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkafs0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdc2-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkdc2-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdc2-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkrb5-26-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkrb5-26-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkrb5-26-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libnss-winbind",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "libnss-winbind 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libnss-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libotp0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libotp0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libotp0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-winbind",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "libpam-winbind 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpam-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libparse-pidl-perl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "libparse-pidl-perl 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libparse-pidl-perl-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libroken18-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libroken18-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libroken18-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsl0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libsl0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsl0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmbclient",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "libsmbclient 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsmbclient-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libwbclient0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "libwbclient0 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwbclient0-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libwind0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libwind0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwind0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-samba",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "python-samba 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-samba-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "registry-tools",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "registry-tools 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-registry-tools-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-common 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-common-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-common-bin 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-common-bin-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dsdb-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-dsdb-modules 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-dsdb-modules-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-libs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-libs 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-libs-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-testsuite 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-testsuite-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-modules",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "samba-vfs-modules 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-samba-vfs-modules-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "smbclient",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "smbclient 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-smbclient-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "winbind",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "fix": "winbind 2:4.7.6\u002Bdfsg~ubuntu-0ubuntu2.10",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.10",
      "released": "2019-05-13T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}