863 matches found
heimdal
Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...
Astra Linux – Vulnerability in Heimdal
The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...
Astra Linux – Vulnerability in Heimdal
Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial-of-service vulnerability in Heimdal’s PKI certificate validation library. This vulnerability affects the KDC via PKINIT and kinit via PKINIT, as well as any third-party applications...
CLEANSTART-2024-WM93067 Heimdal before 7
Security vulnerability affects the heimdal package. Heimdal before 7...
CLEANSTART-2024-ZN45970 In Heimdal through 7
Security vulnerability affects the heimdal package. In Heimdal through 7...
CLEANSTART-2024-BH94102 flaw was found in samba's Heimdal KDC implementation, versions 4
Security vulnerability affects the heimdal package. A flaw was found in samba's Heimdal KDC implementation, versions 4...
CLEANSTART-2024-JK21909 Heimdal before 7
Security vulnerability affects the heimdal package. Heimdal before 7...
CLEANSTART-2024-TH83400 Heimdal is an implementation of ASN
Security vulnerability affects the heimdal package. Heimdal is an implementation of ASN...
CLEANSTART-2024-BZ36226 heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal
Security vulnerability affects the heimdal package. A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal...
CLEANSTART-2024-UF28552 Heimdal before 7
Security vulnerability affects the heimdal package. Heimdal before 7...
CLEANSTART-2024-NJ43669 null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)
Security vulnerability affects the heimdal package. A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request...
CLEANSTART-2024-NY89465 All Samba versions 4
Security vulnerability affects the heimdal package. All Samba versions 4...
CLEANSTART-2024-GP69623 fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp
Security vulnerability affects the heimdal package. The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp...
Astra Linux – Vulnerability in Heimdal
Before version 7.7.1, Heimdal allowed attackers to cause a NULL pointer dereference in an SPNEGO acceptor, by using a preferredmechtype of GSSCNOOID and a non-zero initialresponse value for sendaccept...
Astra Linux – Vulnerability in Heimdal, KRB5
PAC parsing in MIT Kerberos 5 also known as krb5 before versions 1.19.4 and 1.20.x before version 1.20.1 contains integer overflows that may lead to remote code execution in the KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms. This results in a heap-based buffer overflow...
Astra Linux – Vulnerability in Heimdal, Samba
A heap-based buffer overflow vulnerability was discovered in Samba, specifically within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow for a length-limited write buffer overflow on memory allocated by malloc,...
Astra Linux – Vulnerability in Heimdal
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11, and 4.11.x before 4.11.3 have a issue where the S4U MS-SFU Kerberos delegation model includes a feature that allows a subset of clients to be opt-out from constrained delegation in either S4U2Self or regular Kerberos authentication...
Astra Linux – Vulnerability in Heimdal, Samba
Before version 7.7.1, Heimdal allowed remote attackers to execute arbitrary code due to an invalid free operation in the ASN.1 codec used by the Key Distribution Center KDC...
macOS 15.x < 15.8 Multiple Vulnerabilities (149043)
The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.8. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is...
