CVE-2022-44640 - Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC)

Back Back to CVE browser

CRITICAL

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC)

Published Dec 25, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.26%

Description

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-415

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47576
Advisory
https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
Third Party Advisory
https://security.gentoo.org/glsa/202310-06
vendor-advisory
https://security.netapp.com/advisory/ntap-20230216-0008/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47576		Advisory
https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4		Third Party Advisory
https://security.gentoo.org/glsa/202310-06		vendor-advisory
https://security.netapp.com/advisory/ntap-20230216-0008/		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 25, 2022

Updated Apr 15, 2025

Reserved Nov 3, 2022

Link CVE-2022-44640

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-44640

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 25, 2022

Updated Apr 15, 2025

Link EUVD-2022-47576

GitHub

No data