CVE-2022-45142

Related Files

Gentoo Linux Security Advisory 202310-06

Posted Oct 9, 2023

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202310-6 - Multiple vulnerabilities have been discovered in Heimdal, the worst of which could lead to remote code execution on a KDC. Versions greater than or equal to 7.8.0-r1 are affected.

tags | advisory, remote, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2019-14870, CVE-2021-44758, CVE-2022-3437, CVE-2022-3671, CVE-2022-41916, CVE-2022-42898, CVE-2022-44640, CVE-2022-44758, CVE-2022-45142

SHA-256 | 27611271da9764cfeb6bf4345cc8b0a457073005b818ba42fe2a3f1b4b278d83

Download | Favorite | View

Ubuntu Security Notice USN-5849-1

Posted Feb 8, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5849-1 - Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory management operations. An attacker could possibly use this issue to cause a denial of service.

tags | advisory, denial of service

systems | linux, ubuntu

advisories | CVE-2022-45142

SHA-256 | 40e1798aa051314d4df9335d5889b4b0cbb28ebebc46ab65c4e6225cd7e62e8b

Download | Favorite | View

Debian Security Advisory 5344-1

Posted Feb 8, 2023

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5344-1 - Helmut Grohne discovered a flaw in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. The backports of fixes for CVE-2022-3437 accidentally inverted important memory comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check handlers for gssapi, resulting in incorrect validation of message integrity codes.

tags | advisory

systems | linux, debian

advisories | CVE-2022-45142

SHA-256 | 7c5ace0a61c41b914bf85d0ce46cb1382133026bec34cdba70e3112755a5d2d6

Download | Favorite | View