Skip to content
OpenAdvisories
Medium USN-5766-1 1 CVE

heimdal vulnerability

Published Dec 7, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Heimdal did not properly manage memory when
normalizing Unicode. An attacker could possibly use this issue to
cause a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS heimdal 7.5.0+dfsg-1ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS heimdal 7.7.0+dfsg-1ubuntu1.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS heimdal 1.6~git20131207+dfsg-1ubuntu1.2+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS heimdal 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-41916

    Read one byte past a buffer when normalizing Unicode

    Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any t…

    heimdal heimdal samba heimdal Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-41916