heimdal

Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...

PT-2026-142272

Security vulnerability affects the samba package. A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap des and unwrap des3 routines of Heimdal...

Apple MacOS: CVE-2026-112410: OS X update for Heimdal

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may cause an unexpected process termination...

Astra Linux – vulnerability in Heimdal

Heimdal prior to version 7.7.1 allows attackers to trigger a NULL pointer dereference in an SPNEGO acceptor by setting preferredmechtype to GSSCNOOID and using a non-zero initialresponse value for sendaccept...

Astra Linux - vulnerability in heimdal, krb5

PAC parsing in MIT Kerberos 5 aka krb5 prior to versions 1.19.4 and 1.20.x prior to version 1.20.1 contains integer overflows that may lead to remote code execution in the KDC, kadmind, or any GSS/Kerberos application server on 32-bit platforms, resulting in a heap-based buffer overflow; this als...

Astra Linux – vulnerability in Heimdal

Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal’s PKI certificate validation library; this affects the KDC via PKINIT and kinit via PKINIT, as well as any third-party applications that utilize...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

CLEANSTART-2024-WM93067 Heimdal before 7

Security vulnerability affects the heimdal package. Heimdal before 7...

CLEANSTART-2024-ZN45970 In Heimdal through 7

Security vulnerability affects the heimdal package. In Heimdal through 7...

CLEANSTART-2024-BH94102 flaw was found in samba's Heimdal KDC implementation, versions 4

Security vulnerability affects the heimdal package. A flaw was found in samba's Heimdal KDC implementation, versions 4...

CLEANSTART-2024-JK21909 Heimdal before 7

Security vulnerability affects the heimdal package. Heimdal before 7...

CLEANSTART-2024-TH83400 Heimdal is an implementation of ASN

Security vulnerability affects the heimdal package. Heimdal is an implementation of ASN...

CLEANSTART-2024-BZ36226 heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

Security vulnerability affects the heimdal package. A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal...

CLEANSTART-2024-UF28552 Heimdal before 7

Security vulnerability affects the heimdal package. Heimdal before 7...

CLEANSTART-2024-NJ43669 null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

Security vulnerability affects the heimdal package. A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request...

CLEANSTART-2024-NY89465 All Samba versions 4

Security vulnerability affects the heimdal package. All Samba versions 4...

CLEANSTART-2024-GP69623 fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp

Security vulnerability affects the heimdal package. The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp...

Astra Linux – Vulnerability in Heimdal, Samba

A heap-based buffer overflow vulnerability was discovered in Samba, specifically within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow for a length-limited write buffer overflow on memory allocated by malloc,...

Astra Linux – Vulnerability in Heimdal

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11, and 4.11.x before 4.11.3 have a issue where the S4U MS-SFU Kerberos delegation model includes a feature that allows a subset of clients to be opt-out from constrained delegation in either S4U2Self or regular Kerberos authentication...

Astra Linux – Vulnerability in Heimdal, Samba

Before version 7.7.1, Heimdal allowed remote attackers to execute arbitrary code due to an invalid free operation in the ASN.1 codec used by the Key Distribution Center KDC...