Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdal | Mar 26, 2024 | Dec 26, 2022 |
| Debian | — | Upgrade heimdal | Nov 24, 2022 | Nov 24, 2022 |
| Freebsd | — | Upgrade FreeBSD | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal. | Oct 10, 2023 | Dec 26, 2022 |
| Suse | — | Upgrade libheimdal-develUpgrade libheimntlm0Upgrade libheimedit0Upgrade libhcrypto4Upgrade libkadm5clnt7Upgrade libwind0Upgrade libotp0Upgrade libkadm5srv8Upgrade libasn1-8Upgrade libkrb5-26Upgrade libheimbase1Upgrade libsl0Upgrade libroken18Upgrade libhx509-5Upgrade libhdb9Upgrade libkdc2Upgrade libkafs0Upgrade libgssapi3 | Aug 9, 2024 | Dec 26, 2022 |
| Ubuntu | — | Upgrade libhx509-5-heimdalUpgrade libasn1-8-heimdal (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade libhdb9-heimdalUpgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdalUpgrade libkrb5-26-heimdal | Jan 13, 2023 | Dec 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub