Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdal | Mar 26, 2024 | Dec 25, 2022 |
| Debian | — | Upgrade sambaUpgrade heimdal | Nov 24, 2022 | Nov 24, 2022 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Nov 26, 2025 | Jul 5, 2023 |
| Freebsd | — | Upgrade FreeBSD | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal. | Oct 10, 2023 | Dec 25, 2022 |
| Suse | — | Upgrade libhcrypto4Upgrade samba-client-libsUpgrade samba-winbind-libsUpgrade libsamba-policy-develUpgrade libwind0Upgrade samba-libsUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3Upgrade libheimdal-develUpgrade samba-clientUpgrade sambaUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade samba-develUpgrade samba-ldb-ldapUpgrade libsl0Upgrade libheimedit0Upgrade libkadm5clnt7Upgrade libheimntlm0Upgrade samba-libs-python3Upgrade libgssapi3Upgrade samba-cephUpgrade libheimbase1Upgrade libotp0Upgrade samba-python3Upgrade samba-client-libs-32bitUpgrade samba-winbind-libs-32bitUpgrade libhdb9Upgrade libkrb5-26Upgrade libkadm5srv8Upgrade libhx509-5Upgrade libasn1-8Upgrade samba-gpupdateUpgrade libkdc2Upgrade libroken18Upgrade libkafs0 | Jan 17, 2023 | Dec 25, 2022 |
| Ubuntu | — | Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdalUpgrade libhdb9-heimdalUpgrade libgssapi3-heimdalUpgrade libkrb5-26-heimdalUpgrade libasn1-8-heimdalUpgrade libhx509-5-heimdal (Ubuntu Pro)Upgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro) | Jan 13, 2023 | Dec 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub