CVE-2022-44640

EPSS 1.96%
Veröffentlicht 25.12.2022 05:15:11
Zuletzt bearbeitet 15.04.2025 14:15:35
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Heimdal Project ≫ Heimdal Version < 7.7.1

Samba ≫ Samba Version >= 4.15.0 < 4.15.3

Samba ≫ Samba Version >= 4.16.0 < 4.16.8

Samba ≫ Samba Version >= 4.17.0 < 4.17.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.96%	0.827

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

https://security.gentoo.org/glsa/202310-06

https://security.netapp.com/advisory/ntap-20230216-0008/

Third Party Advisory

https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-44640

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-44640

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-44640

EUVD