GCVE - cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Heimdal Project (`0be26378-022c-51c7-8a0b-552fe2c4c51e`)
Product	Heimdal (`45922a2f-b8f6-5279-baad-5b6b52507c63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/heimdal`	purl2cpe	2026-06-01 10:15:43.673270
`pkg:deb/ubuntu/heimdal`	purl2cpe	2026-06-01 10:15:43.673274
`pkg:github/heimdal/heimdal`	purl2cpe	2026-06-01 10:15:43.673277
`pkg:rpm/fedora/heimdal`	purl2cpe	2026-06-01 10:15:43.673280

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-44640`	vulnerable	2026-06-08 05:49:35.942737	Details available Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC). Published: 2022-12-25T00:00:00.000Z Updated: 2025-04-15T13:20:13.623Z Open on db.gcve.eu Reference links https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4 https://security.netapp.com/advisory/ntap-20230216-0008/ https://security.gentoo.org/glsa/202310-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42898`	vulnerable	2026-06-08 05:49:30.673109	Details available PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug." Published: 2022-12-25T00:00:00.000Z Updated: 2026-10-14T18:26:41.154Z Open on db.gcve.eu Reference links https://web.mit.edu/kerberos/advisories/ https://www.samba.org/samba/security/CVE-2022-42898.html https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583 https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41916`	vulnerable	2026-06-08 05:49:28.860817	Read one byte past a buffer when normalizing Unicode MEDIUM (5.9) Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdal's libhx509. Users should upgrade to Heimdal 7.7.1 or 7.8. There are no known workarounds for this issue. Published: 2022-11-15T00:00:00.000Z Updated: 2025-04-23T16:37:26.786Z Open on db.gcve.eu Reference links https://github.com/heimdal/heimdal/security/advisories/GHSA-mgqr-gvh6-23cx https://www.debian.org/security/2022/dsa-5287 https://lists.debian.org/debian-lts-announce/2022/11/msg00034.html https://security.netapp.com/advisory/ntap-20230216-0008/ https://security.gentoo.org/glsa/202310-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3116`	vulnerable	2026-06-08 05:47:19.481936	Details available The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash. Published: 2023-03-27T00:00:00.000Z Updated: 2025-02-24T19:11:43.894Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/730793 https://security.netapp.com/advisory/ntap-20230505-0010/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44758`	vulnerable	2026-06-08 05:36:47.480422	Details available Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept. Published: 2022-12-26T00:00:00.000Z Updated: 2025-04-14T15:57:20.775Z Open on db.gcve.eu Reference links https://github.com/heimdal/heimdal/security/advisories/GHSA-69h9-669w-88xv https://github.com/heimdal/heimdal/commit/f9ec7002cdd526ae84fbacbf153162e118f22580 https://security.gentoo.org/glsa/202310-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12098`	vulnerable	2026-06-08 05:12:38.543925	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16860`	vulnerable	2026-06-08 05:11:05.598428	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6594`	vulnerable	2026-06-08 05:09:51.531342	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17439`	vulnerable	2026-06-08 05:09:09.446799	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11103`	vulnerable	2026-06-08 05:08:36.833506	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4862`	vulnerable	2026-06-08 04:59:33.314983	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0434`	vulnerable	2026-06-08 04:47:49.828575	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Heimdal

Notes

PURL mappings

Vulnerability references

Contribute