CVE-2022-42898
CVE-2022-42898
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."
CVSS 8.8 · High · EPSS 6.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
heimdal Debian:12
- Affected ranges
- ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1
Update to 7.8.git20221115.a6cf945+dfsg-1
heimdal Debian:13
- Affected ranges
- ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1
Update to 7.8.git20221115.a6cf945+dfsg-1
heimdal Debian:14
- Affected ranges
- ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1
Update to 7.8.git20221115.a6cf945+dfsg-1
krb5 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.20.1-1
Update to 1.20.1-1
krb5 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.20.1-1
Update to 1.20.1-1
krb5 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.20.1-1
Update to 1.20.1-1
samba Debian:12
- Affected ranges
- ECOSYSTEM: < 2:4.17.3+dfsg-1
Update to 2:4.17.3+dfsg-1
samba Debian:13
- Affected ranges
- ECOSYSTEM: < 2:4.17.3+dfsg-1
Update to 2:4.17.3+dfsg-1
samba Debian:14
- Affected ranges
- ECOSYSTEM: < 2:4.17.3+dfsg-1
Update to 2:4.17.3+dfsg-1
heimdal Ubuntu:Pro:14.04:LTS
- Versions
- 1.6~git20120403+dfsg1-3ubuntu0.1
- 1.6~git20120403+dfsg1-3ubuntu0.2
- 1.6~git20131207+dfsg-1ubuntu1
- 1.6~git20131207+dfsg-1ubuntu1.1
- 1.6~git20131207+dfsg-1ubuntu1.2
- 1.6~git20131207+dfsg-1ubuntu1.2+esm1
- 1.6~git20131207+dfsg-1ubuntu1.2+esm2
- Affected ranges
- ECOSYSTEM: < 1.6~git20131207+dfsg-1ubuntu1.2+esm3
Update to 1.6~git20131207+dfsg-1ubuntu1.2+esm3
krb5 Ubuntu:Pro:14.04:LTS
- Versions
- 1.10.1+dfsg-6.1ubuntu1
- 1.11.3+dfsg-3ubuntu2
- 1.12+dfsg-2ubuntu1
- 1.12+dfsg-2ubuntu2
- 1.12+dfsg-2ubuntu3
- 1.12+dfsg-2ubuntu4
- 1.12+dfsg-2ubuntu4.2
- 1.12+dfsg-2ubuntu5
- 1.12+dfsg-2ubuntu5.1
- 1.12+dfsg-2ubuntu5.2
- 1.12+dfsg-2ubuntu5.3
- 1.12+dfsg-2ubuntu5.4
- 1.12+dfsg-2ubuntu5.4+esm1
- 1.12+dfsg-2ubuntu5.4+esm2
- Affected ranges
- ECOSYSTEM: < 1.12+dfsg-2ubuntu5.4+esm3
Update to 1.12+dfsg-2ubuntu5.4+esm3
samba Ubuntu:Pro:14.04:LTS
- Versions
- 2:3.6.18-1ubuntu3
- 2:4.0.10+dfsg-4ubuntu2
- 2:4.0.13+dfsg-1ubuntu1
- 2:4.1.3+dfsg-2ubuntu2
- 2:4.1.3+dfsg-2ubuntu3
- 2:4.1.3+dfsg-2ubuntu4
- 2:4.1.3+dfsg-2ubuntu5
- 2:4.1.6+dfsg-1ubuntu1
- 2:4.1.6+dfsg-1ubuntu2
- 2:4.1.6+dfsg-1ubuntu2.14.04.1
- 2:4.1.6+dfsg-1ubuntu2.14.04.2
- 2:4.1.6+dfsg-1ubuntu2.14.04.3
- 2:4.1.6+dfsg-1ubuntu2.14.04.4
- 2:4.1.6+dfsg-1ubuntu2.14.04.5
- 2:4.1.6+dfsg-1ubuntu2.14.04.7
- 2:4.1.6+dfsg-1ubuntu2.14.04.8
- 2:4.1.6+dfsg-1ubuntu2.14.04.9
- 2:4.1.6+dfsg-1ubuntu2.14.04.11
- 2:4.1.6+dfsg-1ubuntu2.14.04.12
- 2:4.1.6+dfsg-1ubuntu2.14.04.13
- 2:4.3.8+dfsg-0ubuntu0.14.04.2
- 2:4.3.9+dfsg-0ubuntu0.14.04.1
- 2:4.3.9+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.1
- 2:4.3.11+dfsg-0ubuntu0.14.04.2
- 2:4.3.11+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.4
- 2:4.3.11+dfsg-0ubuntu0.14.04.6
- 2:4.3.11+dfsg-0ubuntu0.14.04.7
- 2:4.3.11+dfsg-0ubuntu0.14.04.8
- 2:4.3.11+dfsg-0ubuntu0.14.04.9
- 2:4.3.11+dfsg-0ubuntu0.14.04.10
- 2:4.3.11+dfsg-0ubuntu0.14.04.11
- 2:4.3.11+dfsg-0ubuntu0.14.04.12
- 2:4.3.11+dfsg-0ubuntu0.14.04.13
- 2:4.3.11+dfsg-0ubuntu0.14.04.14
- 2:4.3.11+dfsg-0ubuntu0.14.04.16
- 2:4.3.11+dfsg-0ubuntu0.14.04.17
- 2:4.3.11+dfsg-0ubuntu0.14.04.19
- 2:4.3.11+dfsg-0ubuntu0.14.04.20
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
- Affected ranges
- ECOSYSTEM: < 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13
Update to 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13
heimdal Ubuntu:Pro:16.04:LTS
- Versions
- 1.6~rc2+dfsg-10ubuntu1
- 1.7~git20150920+dfsg-4ubuntu1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
- 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2
- Affected ranges
- ECOSYSTEM: < 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
Update to 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
krb5 Ubuntu:Pro:16.04:LTS
- Versions
- 1.13.2+dfsg-2
- 1.13.2+dfsg-3
- 1.13.2+dfsg-4
- 1.13.2+dfsg-5
- 1.13.2+dfsg-5ubuntu1
- 1.13.2+dfsg-5ubuntu2
- 1.13.2+dfsg-5ubuntu2.1
- 1.13.2+dfsg-5ubuntu2.1+esm1
- 1.13.2+dfsg-5ubuntu2.2
- Affected ranges
- ECOSYSTEM: < 1.13.2+dfsg-5ubuntu2.2+esm3
Update to 1.13.2+dfsg-5ubuntu2.2+esm3
samba Ubuntu:Pro:16.04:LTS
- Versions
- 2:4.1.17+dfsg-4ubuntu2
- 2:4.1.20+dfsg-1ubuntu1
- 2:4.1.20+dfsg-1ubuntu2
- 2:4.1.20+dfsg-1ubuntu3
- 2:4.1.20+dfsg-1ubuntu5
- 2:4.3.3+dfsg-1ubuntu1
- 2:4.3.3+dfsg-1ubuntu2
- 2:4.3.3+dfsg-1ubuntu3
- 2:4.3.6+dfsg-1ubuntu1
- 2:4.3.8+dfsg-0ubuntu1
- 2:4.3.9+dfsg-0ubuntu0.16.04.1
- 2:4.3.9+dfsg-0ubuntu0.16.04.2
- 2:4.3.9+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.1
- 2:4.3.11+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.5
- 2:4.3.11+dfsg-0ubuntu0.16.04.6
- 2:4.3.11+dfsg-0ubuntu0.16.04.7
- 2:4.3.11+dfsg-0ubuntu0.16.04.8
- 2:4.3.11+dfsg-0ubuntu0.16.04.9
- 2:4.3.11+dfsg-0ubuntu0.16.04.10
- 2:4.3.11+dfsg-0ubuntu0.16.04.11
- 2:4.3.11+dfsg-0ubuntu0.16.04.12
- 2:4.3.11+dfsg-0ubuntu0.16.04.13
- 2:4.3.11+dfsg-0ubuntu0.16.04.15
- 2:4.3.11+dfsg-0ubuntu0.16.04.16
- 2:4.3.11+dfsg-0ubuntu0.16.04.17
- 2:4.3.11+dfsg-0ubuntu0.16.04.18
- 2:4.3.11+dfsg-0ubuntu0.16.04.19
- 2:4.3.11+dfsg-0ubuntu0.16.04.20
- 2:4.3.11+dfsg-0ubuntu0.16.04.21
- 2:4.3.11+dfsg-0ubuntu0.16.04.23
- 2:4.3.11+dfsg-0ubuntu0.16.04.24
- 2:4.3.11+dfsg-0ubuntu0.16.04.25
- 2:4.3.11+dfsg-0ubuntu0.16.04.26
- 2:4.3.11+dfsg-0ubuntu0.16.04.27
- 2:4.3.11+dfsg-0ubuntu0.16.04.28
- 2:4.3.11+dfsg-0ubuntu0.16.04.29
- 2:4.3.11+dfsg-0ubuntu0.16.04.30
- 2:4.3.11+dfsg-0ubuntu0.16.04.31
- 2:4.3.11+dfsg-0ubuntu0.16.04.32
- 2:4.3.11+dfsg-0ubuntu0.16.04.34
- 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1
- Affected ranges
- ECOSYSTEM: < 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2
Update to 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2
heimdal Ubuntu:18.04:LTS
- Versions
- 7.4.0.dfsg.1-2
- 7.5.0+dfsg-1
- 7.5.0+dfsg-1ubuntu0.1
- 7.5.0+dfsg-1ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 7.5.0+dfsg-1ubuntu0.3
Update to 7.5.0+dfsg-1ubuntu0.3
krb5 Ubuntu:18.04:LTS
- Versions
- 1.15.1-2
- 1.16-2
- 1.16-2build1
- 1.16-2ubuntu0.1
- 1.16-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 1.16-2ubuntu0.3
Update to 1.16-2ubuntu0.3
samba Ubuntu:Pro:18.04:LTS
- Versions
- 2:4.6.7+dfsg-1ubuntu3
- 2:4.7.1+dfsg-1ubuntu1
- 2:4.7.3+dfsg-1ubuntu1
- 2:4.7.4+dfsg-1ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.4
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.5
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.6
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.7
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.10
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.11
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.13
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.15
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.17
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.18
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.19
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.20
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.21
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.23
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.24
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.26
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.27
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.28
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.29
- Affected ranges
- ECOSYSTEM: < 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1
Update to 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1
heimdal Ubuntu:20.04:LTS
- Versions
- 7.5.0+dfsg-3build1
- 7.7.0+dfsg-1
- 7.7.0+dfsg-1ubuntu1
- 7.7.0+dfsg-1ubuntu1.1
- 7.7.0+dfsg-1ubuntu1.2
- Affected ranges
- ECOSYSTEM: < 7.7.0+dfsg-1ubuntu1.3
Update to 7.7.0+dfsg-1ubuntu1.3
krb5 Ubuntu:20.04:LTS
- Versions
- 1.17-6
- 1.17-6ubuntu3
- 1.17-6ubuntu4
- 1.17-6ubuntu4.1
- Affected ranges
- ECOSYSTEM: < 1.17-6ubuntu4.2
Update to 1.17-6ubuntu4.2
samba Ubuntu:20.04:LTS
- Versions
- 2:4.10.7+dfsg-0ubuntu2
- 2:4.10.7+dfsg-0ubuntu3
- 2:4.11.1+dfsg-3ubuntu1
- 2:4.11.1+dfsg-3ubuntu2
- 2:4.11.1+dfsg-3ubuntu4
- 2:4.11.5+dfsg-1ubuntu1
- 2:4.11.5+dfsg-1ubuntu2
- 2:4.11.6+dfsg-0ubuntu1
- 2:4.11.6+dfsg-0ubuntu1.1
- 2:4.11.6+dfsg-0ubuntu1.2
- 2:4.11.6+dfsg-0ubuntu1.3
- 2:4.11.6+dfsg-0ubuntu1.4
- 2:4.11.6+dfsg-0ubuntu1.5
- 2:4.11.6+dfsg-0ubuntu1.6
- 2:4.11.6+dfsg-0ubuntu1.8
- 2:4.11.6+dfsg-0ubuntu1.9
- 2:4.11.6+dfsg-0ubuntu1.10
- 2:4.13.14+dfsg-0ubuntu0.20.04.1
- 2:4.13.14+dfsg-0ubuntu0.20.04.2
- 2:4.13.14+dfsg-0ubuntu0.20.04.3
- 2:4.13.14+dfsg-0ubuntu0.20.04.4
- 2:4.13.17~dfsg-0ubuntu0.21.04.1
- 2:4.13.17~dfsg-0ubuntu0.21.04.2
- 2:4.13.17~dfsg-0ubuntu1.20.04.1
- 2:4.13.17~dfsg-0ubuntu1.20.04.2
- 2:4.13.17~dfsg-0ubuntu1.20.04.4
- 2:4.13.17~dfsg-0ubuntu1.20.04.5
- Affected ranges
- ECOSYSTEM: < 2:4.15.13+dfsg-0ubuntu0.20.04.1
Update to 2:4.15.13+dfsg-0ubuntu0.20.04.1
heimdal Ubuntu:22.04:LTS
- Versions
- 7.7.0+dfsg-2ubuntu2
- 7.7.0+dfsg-3ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
krb5 Ubuntu:22.04:LTS
- Versions
- 1.18.3-6
- 1.18.3-7
- 1.19.2-0ubuntu1
- 1.19.2-1
- 1.19.2-2
- Affected ranges
- ECOSYSTEM: < 1.19.2-2ubuntu0.1
Update to 1.19.2-2ubuntu0.1
Original sources
- https://web.mit.edu/kerberos/advisories/
- https://www.samba.org/samba/security/CVE-2022-42898.html
- https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
- https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
- https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
- https://web.mit.edu/kerberos/krb5-1.19/
- https://bugzilla.samba.org/show_bug.cgi?id=15203
- https://security.netapp.com/advisory/ntap-20230216-0008/
- https://security.netapp.com/advisory/ntap-20230223-0001/
- https://security.gentoo.org/glsa/202309-06
- https://security.gentoo.org/glsa/202310-06
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-42898