crítica
CVE-2022-44640
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Azure Linux, CBL-Mariner, Photon OS. Más baja según Ubuntu (media).
Descripción
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| CBL-Mariner 1.0 | heimdal | 0:7.7.1-1.cm1 |
| Photon OS 3.0 | samba-client | 4.17.8-1.ph3 |
| alpine 3.14 | heimdal | 7.7.1-r0 |
| alpine 3.15 | heimdal | 7.7.1-r0 |
| alpine 3.16 | heimdal | 7.7.1-r0 |
| alpine 3.17 | heimdal | 7.7.1-r0 |
| alpine 3.18 | heimdal | 7.7.1-r0 |
| alpine 3.19 | heimdal | 7.7.1-r0 |
| alpine 3.20 | heimdal | 7.7.1-r0 |
| alpine 3.21 | heimdal | 7.7.1-r0 |
| alpine 3.22 | heimdal | 7.7.1-r0 |
Mostrar las 44 entradas de 35 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| CBL-Mariner 1.0 | heimdal | 0:7.7.1-1.cm1 |
| Photon OS 3.0 | samba-client | 4.17.8-1.ph3 |
| alpine 3.14 | heimdal | 7.7.1-r0 |
| alpine 3.15 | heimdal | 7.7.1-r0 |
| alpine 3.16 | heimdal | 7.7.1-r0 |
| alpine 3.17 | heimdal | 7.7.1-r0 |
| alpine 3.18 | heimdal | 7.7.1-r0 |
| alpine 3.19 | heimdal | 7.7.1-r0 |
| alpine 3.20 | heimdal | 7.7.1-r0 |
| alpine 3.21 | heimdal | 7.7.1-r0 |
| alpine 3.22 | heimdal | 7.7.1-r0 |
| alpine 3.23 | heimdal | 7.7.1-r0 |
| alpine 3.24 | heimdal | 7.7.1-r0 |
| alpine edge | heimdal | 7.7.1-r0 |
| debian 10 | heimdal | 7.5.0+dfsg-3+deb10u1 |
| debian 10 | samba | sin corrección indicada |
| debian 11 | heimdal | 7.7.0+dfsg-2+deb11u2 |
| debian 11 | samba | sin corrección indicada |
| debian 12 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 12 | samba | 2:4.17.4+dfsg-1 |
| debian 13 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 13 | samba | 2:4.17.4+dfsg-1 |
| debian 14 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| debian 14 | samba | 2:4.17.4+dfsg-1 |
| echo | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| echo | samba | 2:4.17.4+dfsg-1 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| root.io debian 12 | rootio-samba | 2:4.17.4+dfsg-1 |
| ubuntu 14.04-ESM | heimdal | 1.6~git20131207+dfsg-1ubuntu1.2+esm3 |
| ubuntu 16.04-ESM | heimdal | 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 |
| ubuntu 18.04 | heimdal | 7.5.0+dfsg-1ubuntu0.3 |
| ubuntu 18.04-ESM | heimdal | 7.5.0+dfsg-1ubuntu0.3 |
| ubuntu 20.04 | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| ubuntu 20.04-ESM | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| ubuntu 22.04 | heimdal | sin corrección indicada |
| ubuntu 24.04 | heimdal | sin corrección indicada |
| ubuntu 26.04 | heimdal | sin corrección indicada |
| ubuntu 26.10 | heimdal | sin corrección indicada |
Referencias
- https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
- https://nvd.nist.gov/vuln/detail/CVE-2022-44640
- https://security.gentoo.org/glsa/202310-06
- https://security.netapp.com/advisory/ntap-20230216-0008/
- https://ubuntu.com/security/notices/USN-5800-1
- https://www.cve.org/CVERecord?id=CVE-2022-44640