p PatchFirst

CVE-2022-44640

CVE-2022-44640

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

CVSS 9.8 · Critical · EPSS 2.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • heimdal Debian:12

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • heimdal Debian:13

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • heimdal Debian:14

    Affected ranges
    • ECOSYSTEM: < 7.8.git20221115.a6cf945+dfsg-1

    Update to 7.8.git20221115.a6cf945+dfsg-1

  • samba Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:4.17.4+dfsg-1

    Update to 2:4.17.4+dfsg-1

  • samba Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:4.17.4+dfsg-1

    Update to 2:4.17.4+dfsg-1

  • samba Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:4.17.4+dfsg-1

    Update to 2:4.17.4+dfsg-1

  • heimdal Ubuntu:Pro:14.04:LTS

    Versions
    • 1.6~git20120403+dfsg1-3ubuntu0.1
    • 1.6~git20120403+dfsg1-3ubuntu0.2
    • 1.6~git20131207+dfsg-1ubuntu1
    • 1.6~git20131207+dfsg-1ubuntu1.1
    • 1.6~git20131207+dfsg-1ubuntu1.2
    • 1.6~git20131207+dfsg-1ubuntu1.2+esm1
    • 1.6~git20131207+dfsg-1ubuntu1.2+esm2
    Affected ranges
    • ECOSYSTEM: < 1.6~git20131207+dfsg-1ubuntu1.2+esm3

    Update to 1.6~git20131207+dfsg-1ubuntu1.2+esm3

  • heimdal Ubuntu:Pro:16.04:LTS

    Versions
    • 1.6~rc2+dfsg-10ubuntu1
    • 1.7~git20150920+dfsg-4ubuntu1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1
    • 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2
    Affected ranges
    • ECOSYSTEM: < 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3

    Update to 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3

  • heimdal Ubuntu:18.04:LTS

    Versions
    • 7.4.0.dfsg.1-2
    • 7.5.0+dfsg-1
    • 7.5.0+dfsg-1ubuntu0.1
    • 7.5.0+dfsg-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 7.5.0+dfsg-1ubuntu0.3

    Update to 7.5.0+dfsg-1ubuntu0.3

  • heimdal Ubuntu:20.04:LTS

    Versions
    • 7.5.0+dfsg-3build1
    • 7.7.0+dfsg-1
    • 7.7.0+dfsg-1ubuntu1
    • 7.7.0+dfsg-1ubuntu1.1
    • 7.7.0+dfsg-1ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 7.7.0+dfsg-1ubuntu1.3

    Update to 7.7.0+dfsg-1ubuntu1.3

  • heimdal Ubuntu:22.04:LTS

    Versions
    • 7.7.0+dfsg-2ubuntu2
    • 7.7.0+dfsg-3ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:24.04:LTS

    Versions
    • 7.8.git20221117.28daf24+dfsg-3ubuntu1
    • 7.8.git20221117.28daf24+dfsg-3ubuntu2
    • 7.8.git20221117.28daf24+dfsg-3ubuntu3
    • 7.8.git20221117.28daf24+dfsg-3ubuntu4
    • 7.8.git20221117.28daf24+dfsg-4ubuntu1
    • 7.8.git20221117.28daf24+dfsg-5ubuntu2
    • 7.8.git20221117.28daf24+dfsg-5ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:25.10

    Versions
    • 7.8.git20221117.28daf24+dfsg-9ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:26.10

    Versions
    • 7.8.git20221117.28daf24+dfsg-11ubuntu1
    • 7.8.git20221117.28daf24+dfsg-12ubuntu1
    • 7.8.git20240113.1b4565a+dfsg-1ubuntu1
    • 7.8.git20240113.1b4565a+dfsg-1ubuntu2
    • 7.8.git20240113.1b4565a+dfsg-2ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heimdal Ubuntu:26.04:LTS

    Versions
    • 7.8.git20221117.28daf24+dfsg-9ubuntu1
    • 7.8.git20221117.28daf24+dfsg-10ubuntu1
    • 7.8.git20221117.28daf24+dfsg-11ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →