Heimdal Project Heimdal 7.8.0
Approved changes feed: RSS · Atom
cpe:2.3:a:heimdal_project:heimdal:7.8.0:*:*:*:*:*:*:*part: a version: 7.8.0 update: *
| Vendor | Heimdal Project (0be26378-022c-51c7-8a0b-552fe2c4c51e) |
|---|---|
| Product | Heimdal (45922a2f-b8f6-5279-baad-5b6b52507c63) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/heimdal |
purl2cpe | 2026-06-01 10:15:43.673991 |
pkg:deb/ubuntu/heimdal |
purl2cpe | 2026-06-01 10:15:43.673993 |
pkg:github/heimdal/heimdal |
purl2cpe | 2026-06-01 10:15:43.673994 |
pkg:rpm/fedora/heimdal |
purl2cpe | 2026-06-01 10:15:43.673996 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45142 |
vulnerable | 2026-06-08 05:50:35.778786 |
Details available
The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches (and possibly other branches) a logic inversion sneaked in causing the validation of message integrity codes in gssapi/arcfour to be inverted.
Published: 2023-03-06T00:00:00.000Z
Updated: 2025-03-06T20:20:48.532Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.