{
  "cveId": "CVE-2019-12098",
  "url": "https://patchblox.com/security/cve/CVE-2019-12098",
  "summary": "CVE-2019-12098 is fixed in 22 products on 1 platform, first by heimdal-clients 7.5.0\u002Bdfsg-1ubuntu0.1, released October 6, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "heimdal-clients: In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a ma...",
  "description": "In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5_init_creds_step in lib/krb5/init_creds_pw.c.",
  "published": "2019-05-15T16:29:00Z",
  "severity": "Low",
  "epss": 0.01974,
  "epssPercentile": 0.80561,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "heimdal-clients",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-clients 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-clients-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-docs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-docs 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-docs-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-kcm",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-kcm 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-kcm-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-kdc",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-kdc 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-kdc-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-multidev",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-multidev 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-multidev-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "heimdal-servers",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "heimdal-servers 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-heimdal-servers-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libasn1-8-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libasn1-8-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libasn1-8-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgssapi3-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libgssapi3-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libgssapi3-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhcrypto4-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhcrypto4-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhcrypto4-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhdb9-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhdb9-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhdb9-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libheimbase1-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libheimbase1-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libheimbase1-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libheimntlm0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libheimntlm0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libheimntlm0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libhx509-5-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libhx509-5-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libhx509-5-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkadm5clnt7-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkadm5clnt7-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkadm5clnt7-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkadm5srv8-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkadm5srv8-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkadm5srv8-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkafs0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkafs0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkafs0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdc2-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkdc2-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdc2-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkrb5-26-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libkrb5-26-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkrb5-26-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libotp0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libotp0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libotp0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libroken18-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libroken18-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libroken18-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsl0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libsl0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsl0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libwind0-heimdal",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7.5.0\u002Bdfsg-1ubuntu0.1",
      "fix": "libwind0-heimdal 7.5.0\u002Bdfsg-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwind0-heimdal-7.5.0-dfsg-1ubuntu0.1",
      "released": "2022-10-06T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}