Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdal | Mar 26, 2024 | Dec 25, 2022 |
| Debian | — | Upgrade heimdalUpgrade samba | Nov 24, 2022 | Nov 24, 2022 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Nov 26, 2025 | Jul 5, 2023 |
| Freebsd | — | Upgrade FreeBSD | Aug 31, 2023 | Aug 31, 2023 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal. | Oct 10, 2023 | Dec 25, 2022 |
| Suse | — | Upgrade samba-gpupdateUpgrade libasn1-8Upgrade libheimbase1Upgrade libotp0Upgrade samba-cephUpgrade libkadm5srv8Upgrade libhdb9Upgrade libroken18Upgrade samba-winbind-libs-32bitUpgrade libkafs0Upgrade libkdc2Upgrade samba-client-libs-32bitUpgrade samba-python3Upgrade libkrb5-26Upgrade libhx509-5Upgrade samba-libsUpgrade libkadm5clnt7Upgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libhcrypto4Upgrade samba-winbind-libsUpgrade libheimntlm0Upgrade libgssapi3Upgrade libheimedit0Upgrade samba-develUpgrade libsl0Upgrade sambaUpgrade samba-libs-32bitUpgrade libheimdal-develUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3Upgrade samba-libs-python3Upgrade samba-winbindUpgrade samba-clientUpgrade libwind0Upgrade libsamba-policy-devel | Jan 17, 2023 | Dec 25, 2022 |
| Ubuntu | — | Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdalUpgrade libgssapi3-heimdalUpgrade libhdb9-heimdalUpgrade libhdb9-heimdal (Ubuntu Pro)Upgrade libhx509-5-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libasn1-8-heimdalUpgrade libkrb5-26-heimdal | Jan 13, 2023 | Dec 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub