Name: CVE-2022-3116: NULL Pointer Dereference
Creator: Rapid7
Published: 2023-03-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-3116, CWE-476, CVSS 7.5, EPSS 0.00105

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Ubuntu	—	Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kdcUpgrade heimdal-clientsUpgrade heimdal-clients (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade heimdal-kcmUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-servers	Oct 14, 2022	Oct 13, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence