The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade heimdal | Jul 30, 2024 | Aug 28, 2017 |
| Suse | — | Upgrade libheimdal-debuginfoUpgrade libheimdal-develUpgrade libheimdalUpgrade libheimdal-debugsource | Aug 17, 2017 | Aug 17, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub