Critical severity9.8NVD Advisory· Published Dec 25, 2022· Updated Jun 17, 2026
CVE-2022-44640
CVE-2022-44640
Description
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- osv-coords5 versionspkg:rpm/suse/libheimdal&distro=SUSE%20Package%20Hub%2015%20SP4pkg:rpm/opensuse/libheimdal&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/libheimdal&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libheimdal&distro=SUSE%20Package%20Hub%2015%20SP3
< 7.8.0-bp154.2.4.1+ 4 more
- (no CPE)range: < 7.8.0-bp154.2.4.1
- (no CPE)range: < 7.8.0-bp154.2.4.1
- (no CPE)range: < 7.8.0-bp153.2.4.1
- (no CPE)range: < 4.17.4+git.300.305b22bfce-1.1
- (no CPE)range: < 7.8.0-bp153.2.4.1
Patches
Vulnerability mechanics
References
3- github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20230216-0008/nvdThird Party Advisory
- security.gentoo.org/glsa/202310-06nvd
News mentions
0No linked articles in our index yet.