A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Mar 26, 2024 | Jan 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libnetapi-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debugsourceUpgrade samba-common-tools-debuginfoUpgrade samba-develUpgrade samba-testUpgrade samba-winbind-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade samba-common-libsUpgrade libnetapi-develUpgrade samba-client-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade python3-samba-develUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-dc-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade libwbclientUpgrade libsmbclientUpgrade libwbclient-debuginfoUpgrade samba-dcerpcUpgrade python3-sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade sambaUpgrade samba-ldb-ldap-modulesUpgrade samba-krb5-printing-debuginfoUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-client-libsUpgrade libwbclient-develUpgrade libnetapiUpgrade samba-usersharesUpgrade samba-test-debuginfo | Feb 17, 2025 | Oct 25, 2022 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Ats | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Finder | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | Jan 12, 2023 |
| Apple Osx Heimdal | — | Upgrade macOS to the latest version | Sep 14, 2026 | Sep 14, 2026 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2023 |
| Debian | — | Upgrade sambaUpgrade heimdal | Nov 24, 2022 | Nov 24, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413Upgrade samba416Upgrade FreeBSD | Nov 4, 2022 | Oct 25, 2022 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade net-fs/samba. | Sep 18, 2023 | Jan 12, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-commonUpgrade libsmbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-winbind-modules | Feb 13, 2023 | Jan 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-winbindUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-client | Jan 6, 2023 | Jan 5, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-clientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-pythonUpgrade samba | Jun 9, 2023 | Jan 12, 2023 |
| Samba | — | Upgrade to Samba 4.15.11 or later.Upgrade to Samba 4.16.6 or later.Upgrade to Samba 4.17.2 or later. | Jan 12, 2023 | Jan 12, 2023 |
| Suse | — | Upgrade libsl0Upgrade samba-winbindUpgrade ctdb-pcp-pmdaUpgrade libheimdal-develUpgrade samba-ldb-ldapUpgrade samba-develUpgrade libsamba-policy-python3-develUpgrade libheimntlm0Upgrade samba-toolUpgrade samba-clientUpgrade libsamba-policy0-python3-64bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-docUpgrade samba-ad-dcUpgrade samba-libsUpgrade samba-winbind-libs-32bitUpgrade samba-libs-32bitUpgrade libwind0Upgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade libhcrypto4Upgrade samba-libs-python3Upgrade libotp0Upgrade sambaUpgrade samba-libs-python3-64bitUpgrade samba-gpupdateUpgrade samba-cephUpgrade samba-python3Upgrade samba-winbind-libsUpgrade samba-libs-python3-32bitUpgrade libkafs0Upgrade samba-libs-64bitUpgrade libheimedit0Upgrade libgssapi3Upgrade samba-client-32bitUpgrade libsamba-policy0-python3Upgrade samba-client-64bitUpgrade libkadm5clnt7Upgrade ctdbUpgrade libsamba-policy0-python3-32bitUpgrade samba-devel-32bitUpgrade libhx509-5Upgrade libkrb5-26Upgrade libhdb9Upgrade libasn1-8Upgrade samba-client-libs-32bitUpgrade libroken18Upgrade samba-testUpgrade libheimbase1Upgrade libkadm5srv8Upgrade libkdc2Upgrade samba-client-libsUpgrade samba-dsdb-modules | Dec 12, 2022 | Dec 9, 2022 |
| Ubuntu | — | Upgrade sambaUpgrade libhdb9-heimdalUpgrade libgssapi3-heimdalUpgrade libhx509-5-heimdalUpgrade libasn1-8-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdalUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade samba (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdal (Ubuntu Pro) | Jan 13, 2023 | Aug 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub