Login Request a demo
Critical severity · published Dec 25, 2022
CVE-2022-44640
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC)
9.8
CVSS
2.3%
EPSS
No
On KEV
Description
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
Heimdal · Heimdal Project
before 7.7.1 · source: NVD
SA
Samba · Samba
4.15.0 before 4.15.3; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 · source: NVD
Affected product
HE
Heimdal
Heimdal Project
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-44640
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-44640
Third Party Advisory
https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
security.gentoo.org
https://security.gentoo.org/glsa/202310-06
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230216-0008/
More from Heimdal
9.8
CVE-2004-0434
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which…
8.8
CVE-2022-42898
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos…
8.1
CVE-2017-11103
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5…
7.5
CVE-2022-3116
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance
7.5
CVE-2022-45142
The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp