Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdal | Mar 26, 2024 | Dec 25, 2022 |
| Debian | — | Upgrade heimdalUpgrade samba | Nov 24, 2022 | Nov 24, 2022 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Nov 26, 2025 | Jul 5, 2023 |
| Freebsd | — | Upgrade FreeBSD | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal. | Oct 10, 2023 | Dec 25, 2022 |
| Suse | — | Upgrade libroken18Upgrade samba-client-libs-32bitUpgrade libhx509-5Upgrade samba-gpupdateUpgrade libkafs0Upgrade libhdb9Upgrade libasn1-8Upgrade samba-python3Upgrade libotp0Upgrade samba-winbind-libs-32bitUpgrade libkdc2Upgrade samba-cephUpgrade libkrb5-26Upgrade libheimbase1Upgrade libkadm5srv8Upgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-libsUpgrade libsl0Upgrade libheimedit0Upgrade samba-develUpgrade libgssapi3Upgrade libheimdal-develUpgrade libsamba-policy0-python3Upgrade libhcrypto4Upgrade samba-client-libsUpgrade samba-libs-python3Upgrade libsamba-policy-python3-develUpgrade libheimntlm0Upgrade samba-clientUpgrade libwind0Upgrade libsamba-policy-develUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade sambaUpgrade libkadm5clnt7 | Jan 17, 2023 | Dec 25, 2022 |
| Ubuntu | — | Upgrade libasn1-8-heimdalUpgrade libhx509-5-heimdal (Ubuntu Pro)Upgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdalUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade libhdb9-heimdalUpgrade libasn1-8-heimdal (Ubuntu Pro) | Jan 13, 2023 | Dec 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub