kritisch
CVE-2022-44640
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Azure Linux, CBL-Mariner, Photon OS. Niedriger laut Ubuntu (mittel).
Beschreibung
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| CBL-Mariner 1.0 | heimdal | 0:7.7.1-1.cm1 |
| Photon OS 3.0 | samba-client | 4.17.8-1.ph3 |
| alpine 3.14 | heimdal | 7.7.1-r0 |
| alpine 3.15 | heimdal | 7.7.1-r0 |
| alpine 3.16 | heimdal | 7.7.1-r0 |
| alpine 3.17 | heimdal | 7.7.1-r0 |
| alpine 3.18 | heimdal | 7.7.1-r0 |
| alpine 3.19 | heimdal | 7.7.1-r0 |
| alpine 3.20 | heimdal | 7.7.1-r0 |
| alpine 3.21 | heimdal | 7.7.1-r0 |
| alpine 3.22 | heimdal | 7.7.1-r0 |
Alle 44 Einträge aus 35 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| CBL-Mariner 1.0 | heimdal | 0:7.7.1-1.cm1 |
| Photon OS 3.0 | samba-client | 4.17.8-1.ph3 |
| alpine 3.14 | heimdal | 7.7.1-r0 |
| alpine 3.15 | heimdal | 7.7.1-r0 |
| alpine 3.16 | heimdal | 7.7.1-r0 |
| alpine 3.17 | heimdal | 7.7.1-r0 |
| alpine 3.18 | heimdal | 7.7.1-r0 |
| alpine 3.19 | heimdal | 7.7.1-r0 |
| alpine 3.20 | heimdal | 7.7.1-r0 |
| alpine 3.21 | heimdal | 7.7.1-r0 |
| alpine 3.22 | heimdal | 7.7.1-r0 |
| alpine 3.23 | heimdal | 7.7.1-r0 |
| alpine 3.24 | heimdal | 7.7.1-r0 |
| alpine edge | heimdal | 7.7.1-r0 |
| debian 10 | heimdal | 7.5.0+dfsg-3+deb10u1 |
| debian 10 | samba | kein Fix angegeben |
| debian 11 | heimdal | 7.7.0+dfsg-2+deb11u2 |
| debian 11 | samba | kein Fix angegeben |
| debian 12 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 12 | samba | 2:4.17.4+dfsg-1 |
| debian 13 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 13 | samba | 2:4.17.4+dfsg-1 |
| debian 14 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 14 | samba | 2:4.17.4+dfsg-1 |
| echo | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| echo | samba | 2:4.17.4+dfsg-1 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| root.io debian 12 | rootio-samba | 2:4.17.4+dfsg-1 |
| ubuntu 14.04-ESM | heimdal | 1.6~git20131207+dfsg-1ubuntu1.2+esm3 |
| ubuntu 16.04-ESM | heimdal | 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 |
| ubuntu 18.04 | heimdal | 7.5.0+dfsg-1ubuntu0.3 |
| ubuntu 18.04-ESM | heimdal | 7.5.0+dfsg-1ubuntu0.3 |
| ubuntu 20.04 | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| ubuntu 20.04-ESM | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| ubuntu 22.04 | heimdal | kein Fix angegeben |
| ubuntu 24.04 | heimdal | kein Fix angegeben |
| ubuntu 26.04 | heimdal | kein Fix angegeben |
| ubuntu 26.10 | heimdal | kein Fix angegeben |
Referenzen
- https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
- https://nvd.nist.gov/vuln/detail/CVE-2022-44640
- https://security.gentoo.org/glsa/202310-06
- https://security.netapp.com/advisory/ntap-20230216-0008/
- https://ubuntu.com/security/notices/USN-5800-1
- https://www.cve.org/CVERecord?id=CVE-2022-44640