Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2022-44640

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

VectorNETWORK

PublishedDec 25, 2022, 05:15

Published Bycve@mitre.org

Base Score

Score9.8

Affected Versions

No affected versions found.

References

https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
https://security.gentoo.org/glsa/202310-06
https://security.netapp.com/advisory/ntap-20230216-0008/

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK