Vulnerabilities > CVE-2022-44640

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

heimdal-project

samba

critical

NVD

Published: 2022-12-25

Updated: 2023-10-08

Summary

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Vulnerable Configurations

Part	Description	Count
Application	Heimdal_Project Heimdal Project Heimdal 0.0J Heimdal Project Heimdal 0.0K Heimdal Project Heimdal 0.0L Heimdal Project Heimdal 0.0M Heimdal Project Heimdal 0.0N Heimdal Project Heimdal 0.0O Heimdal Project Heimdal 0.0P Heimdal Project Heimdal 0.0Q Heimdal Project Heimdal 0.0R Heimdal Project Heimdal 0.0S Heimdal Project Heimdal 0.0T Heimdal Project Heimdal 0.0U Heimdal Project Heimdal 0.1A Heimdal Project Heimdal 0.1B Heimdal Project Heimdal 0.1C Heimdal Project Heimdal 0.1D Heimdal Project Heimdal 0.1E Heimdal Project Heimdal 0.1F Heimdal Project Heimdal 0.1G Heimdal Project Heimdal 0.1H Heimdal Project Heimdal 0.1I Heimdal Project Heimdal 0.1J Heimdal Project Heimdal 0.1K Heimdal Project Heimdal 0.1L Heimdal Project Heimdal 0.1M Heimdal Project Heimdal 0.2A Heimdal Project Heimdal 0.2B Heimdal Project Heimdal 0.2C Heimdal Project Heimdal 0.2D Heimdal Project Heimdal 0.2E Heimdal Project Heimdal 0.2F Heimdal Project Heimdal 0.2G Heimdal Project Heimdal 0.2H Heimdal Project Heimdal 0.2I Heimdal Project Heimdal 0.2J Heimdal Project Heimdal 0.2K Heimdal Project Heimdal 0.2L Heimdal Project Heimdal 0.2M Heimdal Project Heimdal 0.2N Heimdal Project Heimdal 0.2O Heimdal Project Heimdal 0.2P Heimdal Project Heimdal 0.2Q Heimdal Project Heimdal 0.2R Heimdal Project Heimdal 0.2S Heimdal Project Heimdal 0.2T Heimdal Project Heimdal 0.3A Heimdal Project Heimdal 0.3B Heimdal Project Heimdal 0.3C Heimdal Project Heimdal 0.3D Heimdal Project Heimdal 0.3E Heimdal Project Heimdal 0.3F Heimdal Project Heimdal 0.4.D Heimdal Project Heimdal 0.4.E Heimdal Project Heimdal 0.4.F Heimdal Project Heimdal 0.4A Heimdal Project Heimdal 0.4B Heimdal Project Heimdal 0.4C Heimdal Project Heimdal 0.5 Heimdal Project Heimdal 0.5.1 Heimdal Project Heimdal 0.5.2 Heimdal Project Heimdal 0.5.3 Heimdal Project Heimdal 0.6 Heimdal Project Heimdal 0.6.1 Heimdal Project Heimdal 0.6.2 Heimdal Project Heimdal 0.6.3 Heimdal Project Heimdal 0.6.4 Heimdal Project Heimdal 0.6.5 Heimdal Project Heimdal 0.6.6 Heimdal Project Heimdal 0.7 Heimdal Project Heimdal 0.7.1 Heimdal Project Heimdal 0.7.2 Heimdal Project Heimdal 0.8 Heimdal Project Heimdal 0.8.1 Heimdal Project Heimdal 0.9 Heimdal Project Heimdal 1.0.0 Heimdal Project Heimdal 1.0.1 Heimdal Project Heimdal 1.0.2 Heimdal Project Heimdal 1.1.0 Heimdal Project Heimdal 1.2.0 Heimdal Project Heimdal 1.2.1 Heimdal Project Heimdal 1.3.0 Heimdal Project Heimdal 1.3.1 Heimdal Project Heimdal 1.3.2 Heimdal Project Heimdal 1.3.3 Heimdal Project Heimdal 1.4.0 Heimdal Project Heimdal 1.4.1 Heimdal Project Heimdal 1.5.0 Heimdal Project Heimdal 1.5.1 Heimdal Project Heimdal 1.5.2 Heimdal Project Heimdal 1.5.3 Heimdal Project Heimdal 1.6.0 Heimdal Project Heimdal 7.0.1 Heimdal Project Heimdal 7.0.2 Heimdal Project Heimdal 7.0.3 Heimdal Project Heimdal 7.1.0 Heimdal Project Heimdal 7.2.0 Heimdal Project Heimdal 7.3.0 Heimdal Project Heimdal 7.4.0 Heimdal Project Heimdal 7.5.0 Heimdal Project Heimdal 7.6.0 Heimdal Project Heimdal 7.7.0	125
Application	Samba Samba Samba 4.16.0 Samba Samba 4.16.1 Samba Samba 4.16.2 Samba Samba 4.16.3 Samba Samba 4.16.4 Samba Samba 4.16.5 Samba Samba 4.16.6 Samba Samba 4.16.7 Samba Samba 4.17.0 Samba Samba 4.17.1 Samba Samba 4.17.2 Samba Samba 4.17.3 Samba Samba 4.15.0 Samba Samba 4.15.1 Samba Samba 4.15.2	29

Vulnerabilities > CVE-2022-44640 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-44640"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-44640