Description
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | heimdal | 0.6.2-1 | — |
| Debian 13 | heimdal | 0.6.2-1 | — |
| Debian 12 | heimdal | 0.6.2-1 | — |
| Debian 3.0 | heimdal | 0.4e-7.woody.9 | DSA-504 |
Advisories 1
- DSA-504 heimdal - missing input sanitising Debian Security (DSA / DLA) · Mar 9, 2026
References
- heimdal-kadmind-bo(16071) vdb-entry
- DSA-504 vendor-advisory
- 20040506 Advisory: Heimdal kadmind version4 remote heap overflow mailing-list
- 20040505 Advisory: Heimdal kadmind version4 remote heap overflow mailing-list
- GLSA-200405-23 vendor-advisory