Heimdal vulnerabilities

4 known vulnerabilities in Heimdal from Heimdal Project. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Heimdal Software Kerberos: NULL Pointer Dereference

  CVE-2022-3116Mar 27, 2023Heimdal Software Kerberos

  The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.

• 7.5 High severity

  Samba: Improper Validation of Integrity Check Value

  CVE-2022-45142Mar 6, 2023Samba

  The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches (and possibly ot

• 8.8 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Integer Overflow or Wraparound

  CVE-2022-42898Dec 25, 2022SiemensEPSS 6.86%

  PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffe

• 9.8 Critical severity

  Heimdal: Double Free

  CVE-2022-44640Dec 25, 2022Heimdal ProjectEPSS 2.35%

  Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).