High severity8.8NVD Advisory· Published Dec 25, 2022· Updated Jun 17, 2026
CVE-2022-42898
CVE-2022-42898
Description
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
81(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.19.4, <1.20.1
- osv-coords78 versionspkg:rpm/almalinux/krb5-develpkg:rpm/almalinux/krb5-libspkg:rpm/almalinux/krb5-pkinitpkg:rpm/almalinux/krb5-serverpkg:rpm/almalinux/krb5-server-ldappkg:rpm/almalinux/krb5-workstationpkg:rpm/almalinux/libkadm5pkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/krb5&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/krb5&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/krb5-mini&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/libheimdal&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/libheimdal&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweedpkg:rpm/suse/krb5&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/krb5&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/krb5&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/krb5&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.2pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/krb5&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/krb5&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/krb5&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/libheimdal&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/libheimdal&distro=SUSE%20Package%20Hub%2015%20SP4pkg:rpm/suse/samba&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP3pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 1.19.1-24.el9_1+ 77 more
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.1-24.el9_1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150400.3.3.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150400.3.3.1
- (no CPE)range: < 1.20.1-1.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 7.8.0-bp153.2.4.1
- (no CPE)range: < 7.8.0-bp154.2.4.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.591.ab36624310c-150400.3.19.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.591.ab36624310c-150400.3.19.1
- (no CPE)range: < 4.17.3+git.279.ff9bb8a298-1.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.15.2-150000.6.17.1
- (no CPE)range: < 1.15.2-150000.6.17.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150400.3.3.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150400.3.3.1
- (no CPE)range: < 1.19.2-150300.7.7.1
- (no CPE)range: < 1.19.2-150400.3.3.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.15.2-150000.6.17.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.15.2-150000.6.17.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.16.3-150100.3.27.1
- (no CPE)range: < 1.19.2-150300.10.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 1.12.5-40.43.1
- (no CPE)range: < 7.8.0-bp153.2.4.1
- (no CPE)range: < 7.8.0-bp154.2.4.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.482.1ac2c665c7-3.74.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.591.ab36624310c-150400.3.19.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.591.ab36624310c-150400.3.19.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.591.ab36624310c-150400.3.19.1
- (no CPE)range: < 4.15.12+git.535.7750e5c95ef-150300.3.43.1
- (no CPE)range: < 4.15.13+git.482.1ac2c665c7-3.74.1
- (no CPE)range: < 4.15.13+git.482.1ac2c665c7-3.74.1
- (no CPE)range: < 4.15.13+git.482.1ac2c665c7-3.74.1
Patches
Vulnerability mechanics
References
11- github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583nvdPatchThird Party Advisory
- bugzilla.samba.org/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
- github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3cnvdThird Party Advisory
- web.mit.edu/kerberos/advisories/nvdVendor Advisory
- web.mit.edu/kerberos/krb5-1.19/nvdRelease NotesVendor Advisory
- web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txtnvdVendor Advisory
- www.samba.org/samba/security/CVE-2022-42898.htmlnvdThird Party Advisory
- security.gentoo.org/glsa/202309-06nvd
- security.gentoo.org/glsa/202310-06nvd
- security.netapp.com/advisory/ntap-20230216-0008/nvd
- security.netapp.com/advisory/ntap-20230223-0001/nvd
News mentions
0No linked articles in our index yet.