Lucene search

K
ubuntuUbuntuUSN-5766-1
HistoryDec 07, 2022 - 12:00 a.m.

Heimdal vulnerability

2022-12-0700:00:00
ubuntu.com
32
heimdal
ubuntu
kerberos
memory management
denial of service
unicode normalization

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.2%

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • heimdal - Heimdal Kerberos Network Authentication Protocol

Details

It was discovered that Heimdal did not properly manage memory when
normalizing Unicode. An attacker could possibly use this issue to
cause a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlibwind0-heimdal< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-clients< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-clients-dbgsym< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-dev< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-docs< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-kcm< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-kcm-dbgsym< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-kdc< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-kdc-dbgsym< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Ubuntu20.04noarchheimdal-multidev< 7.7.0+dfsg-1ubuntu1.2UNKNOWN
Rows per page:
1-10 of 1851

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.2%