Skip to content
OpenAdvisories
High · 8.8 CVE-2022-42898 EUVD-2022-45956

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executio…

Published Dec 25, 2022 · Updated Oct 14, 2026 · Assigned by mitre

Description

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 heimdal 7.8.git20221115.a6cf945+dfsg-1 —
Debian 14 krb5 1.20.1-1 —
Debian 14 samba 2:4.17.3+dfsg-1 —
Debian 13 heimdal 7.8.git20221115.a6cf945+dfsg-1 —
Debian 13 krb5 1.20.1-1 —
Debian 13 samba 2:4.17.3+dfsg-1 —
Debian 12 heimdal 7.8.git20221115.a6cf945+dfsg-1 —
Debian 12 krb5 1.20.1-1 —
Debian 12 samba 2:4.17.3+dfsg-1 —
Debian 11 heimdal 7.7.0+dfsg-2+deb11u2 DSA-5287-1
Debian 11 krb5 1.18.3-6+deb11u3 DSA-5286-1
Debian 10 heimdal 7.5.0+dfsg-3+deb10u1 DLA-3206-1
Debian 10 krb5 1.17-3+deb10u5 DLA-3213-1
ReleasePackageFixed inAdvisory
Ubuntu 26.10 heimdal No fix yet —
Ubuntu 26.04 LTS heimdal No fix yet —
Ubuntu 25.10 heimdal No fix yet —
Ubuntu 24.04 LTS heimdal No fix yet —
Ubuntu 22.04 LTS heimdal No fix yet —
Ubuntu 22.04 LTS krb5 1.19.2-2ubuntu0.1 USN-5828-1
Ubuntu 22.04 LTS samba 2:4.15.13+dfsg-0ubuntu1 USN-5822-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS heimdal 7.7.0+dfsg-1ubuntu1.3 USN-5800-1
Ubuntu 20.04 LTS krb5 1.17-6ubuntu4.2 USN-5828-1
Ubuntu 20.04 LTS samba 2:4.15.13+dfsg-0ubuntu0.20.04.1 USN-5936-1, USN-5822-1
Ubuntu 18.04 LTS heimdal 7.5.0+dfsg-1ubuntu0.3 USN-5800-1
Ubuntu 18.04 LTS krb5 1.16-2ubuntu0.3 USN-5828-1
Ubuntu Pro 18.04 LTS samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1 USN-7582-1
Ubuntu Pro 16.04 LTS heimdal 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 USN-5800-1
Ubuntu Pro 16.04 LTS krb5 1.13.2+dfsg-5ubuntu2.2+esm3 USN-5828-1
Ubuntu Pro 16.04 LTS samba 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2 USN-7582-1
Ubuntu Pro 14.04 LTS heimdal 1.6~git20131207+dfsg-1ubuntu1.2+esm3 USN-5800-1
Ubuntu Pro 14.04 LTS krb5 1.12+dfsg-2ubuntu5.4+esm3 USN-5828-1
Ubuntu Pro 14.04 LTS samba 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13 USN-7582-1
ReleasePackageFixed inAdvisory
RHEL 9 krb5 +7 1.19.1-24.el9_1 RHSA-2022:8637
RHEL 8 krb5 +7 1.18.2-22.el8_7 RHSA-2022:8638, RHEA-2023:3850
RHEL 7 krb5 +7 1.15.1-55.el7_9 RHSA-2022:8640
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Hypervisor 4 redhat-virtualization-host +1 4.5.3-202212070734_8.6 RHSA-2022:9029
RHEL 9.0 EUS krb5 +7 1.19.1-16.el9_0 RHSA-2022:8669
RHEL 8.6 EUS krb5 +7 1.18.2-15.el8_6 RHSA-2022:8662
RHEL 8.4 EUS krb5 +7 1.18.2-9.el8_4 RHSA-2022:8639
RHEL 8.2 TUS krb5 +7 1.17-19.el8_2 RHSA-2022:8648
RHEL 8.2 E4S krb5 +7 1.17-19.el8_2 RHSA-2022:8648
RHEL 8.2 AUS krb5 +7 1.17-19.el8_2 RHSA-2022:8648
RHEL 8.1 E4S krb5 +7 1.17-10.el8_1 RHSA-2022:8641
RHEL 6 ELS krb5 +7 1.10.3-66.el6_10 RHSA-2022:8663

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 libkadm5 +6 1.19.1-24.el9_1 ALSA-2022:8637
AlmaLinux 8 libkadm5 +6 1.18.2-22.el8_7 ALSA-2022:8638

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 krb5 1.19.1-24.el9_1 RLSA-2022:8637
Rocky Linux 8 krb5 1.18.2-22.el8_7 RLSA-2022:8638
ReleasePackageFixed inAdvisory
SLES 15 SP4 krb5 1.19.2-150400.3.3.1 SUSE-SU-2022:4153-1
SLES 15 SP4 samba 4.15.13+git.591.ab36624310c-150400.3.19.1 SUSE-SU-2023:0160-1
SLES 15 SP3 krb5 1.19.2-150300.7.7.1 SUSE-SU-2023:0198-1, SUSE-SU-2022:4167-1
SLES 15 SP3 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
SLES 15 SP2 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLES 15 SP1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLES 15 krb5 1.15.2-150000.6.17.1 SUSE-SU-2022:4154-1
Show 32 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLES 12 SP5 samba 4.15.13+git.482.1ac2c665c7-3.74.1 SUSE-SU-2023:0081-1
SLES 12 SP4 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLES 12 SP3 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLES 12 SP2 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLES 2 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
SLES for SAP 15 SP3 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SLES for SAP 15 SP2 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLES for SAP 15 SP1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLES for SAP 15 krb5 1.15.2-150000.6.17.1 SUSE-SU-2022:4154-1
SLES for SAP 12 SP5 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLES for SAP 12 SP5 samba 4.15.13+git.482.1ac2c665c7-3.74.1 SUSE-SU-2023:0081-1
SLES for SAP 12 SP4 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SLE Real Time 15 SP3 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SLE Micro 5.3 krb5 1.19.2-150400.3.3.1 SUSE-SU-2022:4153-1
SLE Micro 5.3 samba 4.15.13+git.591.ab36624310c-150400.3.19.1 SUSE-SU-2023:0160-1
SLE Micro 5.2 krb5 1.19.2-150300.7.7.1 SUSE-SU-2023:0198-1, SUSE-SU-2022:4167-1
SLE Micro 5.2 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
SLE Micro 5.1 krb5 1.19.2-150300.7.7.1 SUSE-SU-2023:0198-1, SUSE-SU-2022:4167-1
SLE HPC 15 SP3 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SLE HPC 15 SP2 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLE HPC 15 SP1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SLE HPC 15 krb5 1.15.2-150000.6.17.1 SUSE-SU-2022:4154-1
SUSE Package Hub 15 SP4 libheimdal 7.8.0-bp154.2.4.1 openSUSE-SU-2023:0019-1
SUSE Package Hub 15 SP3 libheimdal 7.8.0-bp153.2.4.1 openSUSE-SU-2023:0020-1
SUSE OpenStack Cloud Crowbar 9 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SUSE OpenStack Cloud 9 krb5 1.12.5-40.43.1 SUSE-SU-2022:4335-1
SUSE Manager Server 4.2 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SUSE Manager Server 4.1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SUSE Manager Retail Branch Server 4.2 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SUSE Manager Retail Branch Server 4.1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SUSE Manager Proxy 4.2 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SUSE Manager Proxy 4.1 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SUSE Enterprise Storage 7.1 krb5 1.19.2-150300.10.1 SUSE-SU-2023:0198-1
SUSE Enterprise Storage 7.1 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
SUSE Enterprise Storage 7 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
SUSE Enterprise Storage 6 krb5 1.16.3-150100.3.27.1 SUSE-SU-2022:4155-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed krb5 1.20.1-1.1 openSUSE-SU-2024:12524-1
openSUSE Tumbleweed samba 4.17.3+git.279.ff9bb8a298-1.1 openSUSE-SU-2024:12525-1
openSUSE Leap 15.4 krb5 1.19.2-150400.3.3.1 SUSE-SU-2022:4153-1
openSUSE Leap 15.4 libheimdal 7.8.0-bp154.2.4.1 openSUSE-SU-2023:0019-1
openSUSE Leap 15.4 samba 4.15.13+git.591.ab36624310c-150400.3.19.1 SUSE-SU-2023:0160-1
openSUSE Leap 15.3 krb5 +1 1.19.2-150300.7.7.1 SUSE-SU-2022:4167-1
openSUSE Leap 15.3 libheimdal 7.8.0-bp153.2.4.1 openSUSE-SU-2023:0020-1
openSUSE Leap 15.3 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.3 krb5 1.19.2-150400.3.3.1 SUSE-SU-2022:4153-1
openSUSE Leap Micro 5.3 samba 4.15.13+git.591.ab36624310c-150400.3.19.1 SUSE-SU-2023:0160-1
openSUSE Leap Micro 5.2 krb5 1.19.2-150300.7.7.1 SUSE-SU-2023:0198-1, SUSE-SU-2022:4167-1
openSUSE Leap Micro 5.2 samba 4.15.12+git.535.7750e5c95ef-150300.3.43.1 SUSE-SU-2022:4395-1
ReleasePackageFixed inAdvisory
Alpine v3.24 heimdal 7.7.1-r0 —
Alpine v3.24 krb5 1.20.1-r0 —
Alpine v3.24 samba 4.16.7-r0 —
Alpine v3.23 heimdal 7.7.1-r0 —
Alpine v3.23 krb5 1.20.1-r0 —
Alpine v3.23 samba 4.16.7-r0 —
Alpine v3.22 heimdal 7.7.1-r0 —
Alpine v3.22 krb5 1.20.1-r0 —
Alpine v3.22 samba 4.16.7-r0 —
Alpine v3.21 heimdal 7.7.1-r0 —
Alpine v3.21 krb5 1.20.1-r0 —
Alpine v3.21 samba 4.16.7-r0 —
Alpine v3.20 heimdal 7.7.1-r0 —
Alpine v3.20 krb5 1.20.1-r0 —
Alpine v3.20 samba 4.16.7-r0 —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 heimdal 7.7.1-r0 —
Alpine v3.19 krb5 1.20.1-r0 —
Alpine v3.19 samba 4.16.7-r0 —
Alpine v3.18 heimdal 7.7.1-r0 —
Alpine v3.18 krb5 1.20.1-r0 —
Alpine v3.18 samba 4.16.7-r0 —
Alpine v3.17 heimdal 7.7.1-r0 —
Alpine v3.17 krb5 1.20.1-r0 —
Alpine v3.16 heimdal 7.7.1-r0 —
Alpine v3.16 krb5 1.19.4-r0 —
Alpine v3.16 samba 4.15.12-r0 —
Alpine v3.15 heimdal 7.7.1-r0 —
Alpine v3.15 krb5 1.19.4-r0 —
Alpine v3.15 samba 4.15.12-r0 —
Alpine v3.14 heimdal 7.7.1-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 libkadm5 +6 1.15.1-55.amzn2.2.5 ALAS2-2023-1915

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 samba 4.18.3-1 —
Azure Linux 2 (CBL-Mariner) krb5 1.19.4-1 —
Azure Linux 2 (CBL-Mariner) samba No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 libkadm5 +6 1.19.1-24.0.1.el9_1 ELSA-2022-8637
Oracle Linux 8 libkadm5 +6 1.18.2-22.0.1.el8_7 ELSA-2022-8638
Oracle Linux 7 libkadm5 +6 1.15.1-55.0.1.el7_9 ELSA-2022-8640

Advisories 50

References