Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202310-06
HistoryOct 08, 2023 - 12:00 a.m.

Heimdal: Multiple Vulnerabilities

2023-10-0800:00:00
Gentoo Foundation
security.gentoo.org
29
heimdal
kerberos 5
vulnerabilities
remote code execution
cross-realm trust

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.023

Percentile

89.8%

JSON

Background

Heimdal is a free implementation of Kerberos 5.

Description

Multiple vulnerabilities have been discovered in Heimdal, the worst of which could lead to remote code execution on a Kerberos Domain Controller. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Cross-realm trust vulnerability in Heimdal users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-crypt/heimdal-7.8.0-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-crypt/heimdal< 7.8.0-r1UNKNOWN

Related

nessus 42
freebsd 2
debian 4
openvas 36
osv 16
mageia 2
freebsd_advisory 1
rosalinux 1
cloudfoundry 3
ubuntu 3
fedora 7
prion 8
nvd 7
redhatcve 2
alpinelinux 5
ubuntucve 6
debiancve 7
cve 7
cvelist 8
cbl_mariner 9
veracode 6
redos 2
symantec 1
vulnrichment 1
samba 1
wolfi 1
cgr 1
ibm 1
amazon 1
cisa 1
redhat 4
f5 1
altlinux 1
rocky 1
nessus
nessus
GLSA-202310-06 : Heimdal: Multiple Vulnerabilities
2023-10-08 00:00:00
FreeBSD : FreeBSD -- Multiple vulnerabilities in Heimdal (97c1b0f7-47b9-11ee-8e38-002590c1f29c)
2023-08-31 00:00:00
openSUSE 15 Security Update : libheimdal (openSUSE-SU-2023:0020-1)
2023-01-17 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in Heimdal
2022-11-15 00:00:00
samba -- buffer overflow in Heimdal unwrap_des3()
2022-08-02 00:00:00
debian
debian
[SECURITY] [DLA 3206-1] heimdal security update
2022-11-26 20:21:42
[SECURITY] [DSA 5287-1] heimdal security update
2022-11-22 19:58:01
[SECURITY] [DLA 3311-1] heimdal security update
2023-02-08 11:57:40
openvas
openvas
Debian: Security Advisory (DLA-3206-1)
2022-11-27 00:00:00
Mageia: Security Advisory (MGASA-2022-0468)
2022-12-19 00:00:00
Ubuntu: Security Advisory (USN-5800-1)
2023-01-13 00:00:00
osv
osv
heimdal - security update
2022-11-26 00:00:00
heimdal - security update
2022-11-22 00:00:00
heimdal vulnerabilities
2023-01-12 17:12:53
mageia
mageia
Updated heimdal packages fix security vulnerability
2022-12-17 21:48:08
Updated heimdal packages fix security vulnerability
2023-03-19 01:16:28
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:14.heimdal
2022-11-15 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2419
2024-05-14 08:56:01
cloudfoundry
cloudfoundry
USN-5800-1: Heimdal vulnerabilities | Cloud Foundry
2023-02-01 00:00:00
USN-5766-1-Heimdal-vulnerability | Cloud Foundry
2023-01-13 00:00:00
USN-5849-1: Heimdal vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
ubuntu
ubuntu
Heimdal vulnerabilities
2023-01-12 00:00:00
Heimdal vulnerability
2022-12-07 00:00:00
Heimdal vulnerabilities
2023-02-08 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: heimdal-7.7.1-3.fc35
2022-11-30 01:38:55
[SECURITY] Fedora 37 Update: heimdal-7.7.1-3.fc37
2022-11-30 01:36:43
[SECURITY] Fedora 36 Update: heimdal-7.7.1-3.fc36
2022-11-30 01:35:59
prion
prion
Design/Logic Flaw
2023-03-06 23:15:00
Code injection
2022-12-25 05:15:00
Null pointer dereference
2022-12-26 05:15:00
nvd
nvd
CVE-2022-45142
2023-03-06 23:15:11
CVE-2022-44758
2023-10-11 07:15:09
CVE-2022-44640
2022-12-25 05:15:11
redhatcve
redhatcve
CVE-2022-45142
2023-02-09 13:26:48
CVE-2019-14870
2020-04-01 02:39:59
alpinelinux
alpinelinux
CVE-2022-45142
2023-03-06 23:15:11
CVE-2021-44758
2022-12-26 05:15:10
CVE-2022-44640
2022-12-25 05:15:11
ubuntucve
ubuntucve
CVE-2022-45142
2023-02-08 00:00:00
CVE-2022-3437
2022-10-27 00:00:00
CVE-2022-44640
2022-12-25 00:00:00
debiancve
debiancve
CVE-2022-45142
2023-03-06 23:15:11
CVE-2021-44758
2022-12-26 05:15:10
CVE-2022-44640
2022-12-25 05:15:11
cve
cve
CVE-2022-45142
2023-03-06 23:15:11
CVE-2022-44640
2022-12-25 05:15:11
CVE-2022-44758
2023-10-11 07:15:09
cvelist
cvelist
CVE-2022-45142
2023-03-06 00:00:00
CVE-2021-44758
2022-12-26 00:00:00
CVE-2022-44640
2022-12-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-44640 affecting package heimdal 7.7.0-5
2023-01-29 21:01:57
CVE-2022-41916 affecting package heimdal 7.7.0-5
2023-01-29 21:01:57
CVE-2021-44758 affecting package heimdal 7.7.0-5
2023-01-29 21:01:57
veracode
veracode
Remote Code Execution (RCE)
2022-11-24 13:35:06
Denial Of Service (DoS)
2022-11-24 13:09:08
Denial Of Service
2022-11-23 05:49:26
redos
redos
ROS-20240812-01
2024-08-12 00:00:00
ROS-20230417-02
2023-04-17 00:00:00
symantec
symantec
Samba CVE-2019-14870 Remote Security Bypass Vulnerability
2019-12-10 00:00:00
vulnrichment
vulnrichment
CVE-2022-44758 HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling
2023-10-11 06:00:38
samba
samba
DelegationNotAllowed not being enforced
2019-12-10 00:00:00
wolfi
wolfi
CVE-2022-45142 vulnerabilities
2024-09-30 03:53:08
cgr
cgr
CVE-2022-45142 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2022-3437)
2023-03-07 16:41:57
amazon
amazon
Important: krb5
2023-01-18 20:56:00
cisa
cisa
Samba Releases Security Updates
2022-11-16 00:00:00
redhat
redhat
(RHSA-2022:8637) Important: krb5 security update
2022-11-28 09:18:18
(RHSA-2022:9029) Important: Red Hat Virtualization Host security update [ovirt-4.5.3-3]
2022-12-14 14:12:25
(RHSA-2022:8638) Important: krb5 security update
2022-11-28 09:21:44
f5
f5
SAMBA vulnerability CVE-2022-42898
2022-11-29 22:49:00
altlinux
altlinux
Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4
2022-11-24 00:00:00
rocky
rocky
krb5 security update
2022-11-28 09:18:18

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.023

Percentile

89.8%

JSON
Related for GLSA-202310-06
nessus42freebsd2debian4openvas36osv16mageia2freebsd_advisory1rosalinux1cloudfoundry3ubuntu3fedora7prion8nvd7redhatcve2alpinelinux5ubuntucve6debiancve7cve7cvelist8cbl_mariner9veracode6redos2symantec1vulnrichment1samba1wolfi1cgr1ibm1amazon1cisa1redhat4f51altlinux1rocky1