2 results · Feed
-
High 7.5
The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!…
-
Medium 5.9
Read one byte past a buffer when normalizing Unicode
Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any t…