p PatchFirst

CVE-2021-44758

CVE-2021-44758

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.

CVSS 7.5 · High · EPSS 1.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • heimdal Debian:12

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • heimdal Debian:13

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • heimdal Debian:14

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • heimdal Ubuntu:Pro:14.04:LTS

    Versions
    • 1.6~git20120403+dfsg1-3ubuntu0.1
    • 1.6~git20120403+dfsg1-3ubuntu0.2
    • 1.6~git20131207+dfsg-1ubuntu1
    • 1.6~git20131207+dfsg-1ubuntu1.1
    • 1.6~git20131207+dfsg-1ubuntu1.2
    • 1.6~git20131207+dfsg-1ubuntu1.2+esm1
    • 1.6~git20131207+dfsg-1ubuntu1.2+esm2
    Affected ranges
    • ECOSYSTEM: < 1.6~git20131207+dfsg-1ubuntu1.2+esm3

    Update to 1.6~git20131207+dfsg-1ubuntu1.2+esm3

  • heimdal Ubuntu:Pro:16.04:LTS

    Versions
    • 1.6~rc2+dfsg-10ubuntu1
    • 1.7~git20150920+dfsg-4ubuntu1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2
    Affected ranges
    • ECOSYSTEM: < 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3

    Update to 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3

  • heimdal Ubuntu:18.04:LTS

    Versions
    • 7.4.0.dfsg.1-2
    • 7.5.0+dfsg-1
    • 7.5.0+dfsg-1ubuntu0.1
    • 7.5.0+dfsg-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 7.5.0+dfsg-1ubuntu0.3

    Update to 7.5.0+dfsg-1ubuntu0.3

  • heimdal Ubuntu:20.04:LTS

    Versions
    • 7.5.0+dfsg-3build1
    • 7.7.0+dfsg-1
    • 7.7.0+dfsg-1ubuntu1
    • 7.7.0+dfsg-1ubuntu1.1
    • 7.7.0+dfsg-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 7.7.0+dfsg-1ubuntu1.3

    Update to 7.7.0+dfsg-1ubuntu1.3

  • heimdal Ubuntu:22.04:LTS

    Versions
    • 7.7.0+dfsg-2ubuntu2
    • 7.7.0+dfsg-3ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:24.04:LTS

    Versions
    • 7.8.git20221117.28daf24+dfsg-3ubuntu1
    • 7.8.git20221117.28daf24+dfsg-3ubuntu2
    • 7.8.git20221117.28daf24+dfsg-3ubuntu3
    • 7.8.git20221117.28daf24+dfsg-3ubuntu4
    • 7.8.git20221117.28daf24+dfsg-4ubuntu1
    • 7.8.git20221117.28daf24+dfsg-5ubuntu2
    • 7.8.git20221117.28daf24+dfsg-5ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:25.10

    Versions
    • 7.8.git20221117.28daf24+dfsg-9ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:26.10

    Versions
    • 7.8.git20221117.28daf24+dfsg-11ubuntu1
    • 7.8.git20221117.28daf24+dfsg-12ubuntu1
    • 7.8.git20240113.1b4565a+dfsg-1ubuntu1
    • 7.8.git20240113.1b4565a+dfsg-1ubuntu2
    • 7.8.git20240113.1b4565a+dfsg-2ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:26.04:LTS

    Versions
    • 7.8.git20221117.28daf24+dfsg-9ubuntu1
    • 7.8.git20221117.28daf24+dfsg-10ubuntu1
    • 7.8.git20221117.28daf24+dfsg-11ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →