CVE catalog

CVE-2016-5104

libimobiledevice: CVE-2016-5104

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.99% · Oct 25, 2026

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibusbmuxdsid2.1.1-1fixed
Debianlibusbmuxdforky2.1.1-1fixed
Debianlibusbmuxdtrixie2.1.0-1fixed
Debianlibusbmuxdbookworm2.0.2-3fixed
Debianlibimobiledevicesid1.4.0-1fixed
Debianlibimobiledeviceforky1.4.0-1fixed
Debianlibimobiledevicetrixie1.3.0+git20250228-2fixed
Debianlibimobiledevicebookworm1.3.0-6fixed
Ubuntulibimobiledevice14.041.1.5-0ubuntu2vulnerable
Ubuntulibimobiledevice14.041.1.5-2vulnerable
Ubuntulibimobiledevice14.041.1.5-2build1vulnerable
Ubuntulibimobiledevice14.041.1.5+git20140313.bafe6a9e-0ubuntu1vulnerable
Ubuntulibimobiledevice14.041.1.5+git20140313.bafe6a9e-0ubuntu1.1fixed
Ubuntulibimobiledevice16.041.1.6+dfsg-3.1build1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2.1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2.1build1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-3~ubuntu0.1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-3~ubuntu0.2fixed
Ubuntulibusbmuxd16.041.0.9-1build1vulnerable
Ubuntulibusbmuxd16.041.0.10-2vulnerable
Ubuntulibusbmuxd16.041.0.10-2ubuntu0.1fixed
Ubuntulibusbmuxd16.041.0.9-1build1vulnerable
Ubuntulibusbmuxd16.041.0.10-2vulnerable
Ubuntulibusbmuxd16.041.0.10-2ubuntu0.1fixed
Ubuntulibimobiledevice14.041.1.5-0ubuntu2vulnerable
Ubuntulibimobiledevice14.041.1.5-2vulnerable
Ubuntulibimobiledevice14.041.1.5-2build1vulnerable
Ubuntulibimobiledevice14.041.1.5+git20140313.bafe6a9e-0ubuntu1vulnerable
Ubuntulibimobiledevice14.041.1.5+git20140313.bafe6a9e-0ubuntu1.1fixed
Ubuntulibimobiledevice16.041.1.6+dfsg-3.1build1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2.1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-2.1build1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-3~ubuntu0.1vulnerable
Ubuntulibimobiledevice16.041.2.0+dfsg-3~ubuntu0.2fixed
Suselibimobiledevicelinux enterprise desktop 121.1.5-6.1fixed
Suseusbmuxdlinux enterprise desktop 121.0.8-12.1fixed
Suselibimobiledevicelinux enterprise desktop 12 sp11.1.5-6.1fixed
Suseusbmuxdlinux enterprise desktop 12 sp11.0.8-12.1fixed
Suselibimobiledevicelinux enterprise software development kit 121.1.5-6.1fixed
Suseusbmuxdlinux enterprise software development kit 121.0.8-12.1fixed
Suselibimobiledevicelinux enterprise software development kit 12 sp11.1.5-6.1fixed
Suseusbmuxdlinux enterprise software development kit 12 sp11.0.8-12.1fixed
Suselibimobiledevicelinux enterprise server 121.1.5-6.1fixed
Suseusbmuxdlinux enterprise server 121.0.8-12.1fixed
Suselibimobiledevicelinux enterprise server for sap applications 121.1.5-6.1fixed
Suseusbmuxdlinux enterprise server for sap applications 121.0.8-12.1fixed
Suselibimobiledevicelinux enterprise server 12 sp11.1.5-6.1fixed
Suseusbmuxdlinux enterprise server 12 sp11.0.8-12.1fixed
Suselibimobiledevicelinux enterprise server for sap applications 12 sp11.1.5-6.1fixed
Suseusbmuxdlinux enterprise server for sap applications 12 sp11.0.8-12.1fixed
Suselibimobiledevicelinux enterprise workstation extension 121.1.5-6.1fixed
Suselibimobiledevicelinux enterprise workstation extension 12 sp11.1.5-6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibusbmuxdsourcesid1.0.10-3not yet assignedNot reported[825554]
Debianlibusbmuxdsourceforky1.0.10-3not yet assignedNot reported[825554]
Debianlibusbmuxdsourcetrixie1.0.10-3not yet assignedNot reported[825554]
Debianlibusbmuxdsourcebookworm1.0.10-3not yet assignedNot reported[825554]
Debianlibimobiledevicesourcesid1.2.0+dfsg-3not yet assignedNot reported[825553]
Debianlibimobiledevicesourceforky1.2.0+dfsg-3not yet assignedNot reported[825553]
Debianlibimobiledevicesourcetrixie1.2.0+dfsg-3not yet assignedNot reported[825553]
Debianlibimobiledevicesourcebookworm1.2.0+dfsg-3not yet assignedNot reported[825553]
Ubuntulibimobiledevicedeb14.041.1.5+git20140313.bafe6a9e-0ubuntu1.1Not reportedUBUNTU-CVE-2016-5104Not reported
Ubuntulibimobiledevicedeb16.041.2.0+dfsg-3~ubuntu0.2Not reportedUBUNTU-CVE-2016-5104Not reported
Ubuntulibusbmuxddeb16.041.0.10-2ubuntu0.1Not reportedUBUNTU-CVE-2016-5104Not reported
Ubuntulibusbmuxddeb16.041.0.10-2ubuntu0.1Not reportedUSN-3026-2Not reported
Ubuntulibimobiledevicedeb14.041.1.5+git20140313.bafe6a9e-0ubuntu1.1Not reportedUSN-3026-1Not reported
Ubuntulibimobiledevicedeb16.041.2.0+dfsg-3~ubuntu0.2Not reportedUSN-3026-1Not reported
Suselibimobiledevicerpmlinux enterprise desktop 121.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise desktop 121.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise desktop 12 sp11.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise desktop 12 sp11.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise software development kit 121.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise software development kit 121.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise software development kit 12 sp11.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise software development kit 12 sp11.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise server 121.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise server 121.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise server for sap applications 121.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise server for sap applications 121.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise server 12 sp11.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise server 12 sp11.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise server for sap applications 12 sp11.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suseusbmuxdrpmlinux enterprise server for sap applications 12 sp11.0.8-12.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise workstation extension 121.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported
Suselibimobiledevicerpmlinux enterprise workstation extension 12 sp11.1.5-6.1Not reportedSUSE-SU-2016:1639-1Not reported

[Debian bug #825554][Debian bug #825553]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libimobiledevice6]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0-6+b3 · amd64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

    • 1.3.0-6+b3 · arm64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

  • [libimobiledevice-dev]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0-6+b3 · amd64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

    • 1.3.0-6+b3 · arm64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

  • [libimobiledevice-doc]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0-6 · all · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

    • 1.3.0-6 · all · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

  • [libimobiledevice-utils]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0-6+b3 · amd64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

    • 1.3.0-6+b3 · arm64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

  • [libusbmuxd6]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.0.2-3 · amd64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

    • 2.0.2-3 · arm64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

  • [libusbmuxd-dev]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.0.2-3 · amd64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

    • 2.0.2-3 · arm64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

  • [libusbmuxd-tools]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.0.2-3 · amd64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

    • 2.0.2-3 · arm64 · bookworm

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · bookworm; dsa · libusbmuxd · debian · 12

  • [python3-imobiledevice]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0-6+b3 · amd64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

    • 1.3.0-6+b3 · arm64 · bookworm

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · bookworm; dsa · libimobiledevice · debian · 12

[Debian 13 (Trixie)]

  • [libimobiledevice-1.0-6]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0+git20250228-2 · amd64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

    • 1.3.0+git20250228-2 · arm64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

  • [libimobiledevice-dev]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0+git20250228-2 · amd64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

    • 1.3.0+git20250228-2 · arm64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

  • [libimobiledevice-doc]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0+git20250228-2 · all · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

    • 1.3.0+git20250228-2 · all · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

  • [libimobiledevice-utils]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0+git20250228-2 · amd64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

    • 1.3.0+git20250228-2 · arm64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

  • [libusbmuxd-2.0-7]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.1.0-1+b1 · amd64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

    • 2.1.0-1+b1 · arm64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

  • [libusbmuxd-dev]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.1.0-1+b1 · amd64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

    • 2.1.0-1+b1 · arm64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

  • [libusbmuxd-tools]Unknown

    Source package: [libusbmuxd]

    Details (2)

    • 2.1.0-1+b1 · amd64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

    • 2.1.0-1+b1 · arm64 · trixie

      Fixed · Fixed: 1.0.10-3

      dsa · libusbmuxd · debian · 13

  • [python3-imobiledevice]Unknown

    Source package: [libimobiledevice]

    Details (2)

    • 1.3.0+git20250228-2 · amd64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

    • 1.3.0+git20250228-2 · arm64 · trixie

      Fixed · Fixed: 1.2.0+dfsg-3

      dsa · libimobiledevice · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]