Description
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libimobiledevice | 1.2.0+dfsg-3 | — |
| Debian 14 | libusbmuxd | 1.0.10-3 | — |
| Debian 13 | libimobiledevice | 1.2.0+dfsg-3 | — |
| Debian 13 | libusbmuxd | 1.0.10-3 | — |
| Debian 12 | libimobiledevice | 1.2.0+dfsg-3 | — |
| Debian 12 | libusbmuxd | 1.0.10-3 | — |
| Debian 8 | libimobiledevice | 1.1.6+dfsg-3.1+deb8u1 | DLA-2121-1 |
| Debian 8 | libusbmuxd | 1.0.9-1+deb8u1 | DLA-2122-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | libimobiledevice | 1.2.0+dfsg-3~ubuntu0.2 | USN-3026-1 |
| Ubuntu 16.04 LTS | libusbmuxd | 1.0.10-2ubuntu0.1 | USN-3026-2 |
| Ubuntu 14.04 LTS | libimobiledevice | 1.1.5+git20140313.bafe6a9e-0ubuntu1.1 | USN-3026-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | libimobiledevice | 1.1.5-6.1 | SUSE-SU-2016:1639-1 |
| SLES 12 SP1 | usbmuxd | 1.0.8-12.1 | SUSE-SU-2016:1639-1 |
| SLES 12 | libimobiledevice | 1.1.5-6.1 | SUSE-SU-2016:1639-1 |
| SLES 12 | usbmuxd | 1.0.8-12.1 | SUSE-SU-2016:1639-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | libimobiledevice | 1.1.5-6.1 | SUSE-SU-2016:1639-1 |
| SLES for SAP 12 SP1 | usbmuxd | 1.0.8-12.1 | SUSE-SU-2016:1639-1 |
| SLES for SAP 12 | libimobiledevice | 1.1.5-6.1 | SUSE-SU-2016:1639-1 |
| SLES for SAP 12 | usbmuxd | 1.0.8-12.1 | SUSE-SU-2016:1639-1 |
Advisories 5
- USN-3026-2 libusbmuxd vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-3026-1 libimobiledevice vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-2121-1 libimobiledevice - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2122-1 libusbmuxd - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2016:1639-1 Security update for libimobiledevice, usbmuxd SUSE / openSUSE Security Updates · Feb 4, 2026
References
- openSUSE-SU-2016:1526 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1339988
- USN-3026-1 vendor-advisory
- https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196
- https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e
- [oss-security] 20160525 CVE Requests: libimobiledevice and libusbmuxd mailing-list
- SUSE-SU-2016:1639 vendor-advisory
- USN-3026-2 vendor-advisory
- [oss-security] 20160526 Re: CVE Requests: libimobiledevice and libusbmuxd mailing-list
- [debian-lts-announce] 20200227 [SECURITY] [DLA 2121-1] libimobiledevice security update mailing-list
- [debian-lts-announce] 20200227 [SECURITY] [DLA 2122-1] libusbmuxd security update mailing-list