heimdal - security update

Fixed packages 1

Vulnerabilities 7

• Critical 9.8
  CVE-2022-44640

  Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec us…

  samba samba heimdal heimdal Debian Ubuntu Azure Linux Alpine
  Dec 25, 2022
• High 8.8
  CVE-2022-42898

  PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

  samba krb5 samba samba Debian Ubuntu Azure Linux Alpine
  Dec 25, 2022
• High 7.5
  CVE-2021-44758

  Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_typ…

  samba heimdal heimdal heimdal Debian Ubuntu Azure Linux Alpine
  Dec 26, 2022
• Medium 5.9
  CVE-2022-41916

  Read one byte past a buffer when normalizing Unicode

  Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any t…

  heimdal heimdal samba heimdal Debian Ubuntu Azure Linux Alpine
  Nov 15, 2022
• Medium 5.4
  CVE-2019-14870

  All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS…

  Red Hat samba samba samba Debian Ubuntu Alpine
  Dec 10, 2019
• Medium 4.3
  CVE-2022-3437

  A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Jan 12, 2023
• Unscored —
  CVE-2021-3671

  A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Grantin…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Oct 12, 2021