CVE-2022-44640

EPSS 1.96%
Published 25.12.2022 05:15:11
Last modified 15.04.2025 14:15:35
Source cve@mitre.org
Teams watchlist Login
Open Login

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Heimdal Project ≫ Heimdal Version < 7.7.1

Samba ≫ Samba Version >= 4.15.0 < 4.15.3

Samba ≫ Samba Version >= 4.16.0 < 4.16.8

Samba ≫ Samba Version >= 4.17.0 < 4.17.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.96%	0.827

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

https://security.gentoo.org/glsa/202310-06

https://security.netapp.com/advisory/ntap-20230216-0008/

Third Party Advisory

https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-44640

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-44640

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-44640

EUVD