CVE-2022-3116
Fixed in a distro release EPSS <1%CVSS 7.5
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
Products: heimdal_project heimdal
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 18.04 LTS | heimdal | 7.5.0+dfsg-1ubuntu0.1 |
| Ubuntu 20.04 LTS | heimdal | 7.7.0+dfsg-1ubuntu1.1 |
| Ubuntu 22.04 LTS | heimdal | no fix |
| Ubuntu 24.04 LTS | heimdal | no fix |
| Ubuntu 25.10 | heimdal | no fix |
| Ubuntu 26.04 LTS | heimdal | no fix |
| Ubuntu 26.10 | heimdal | no fix |
| Ubuntu Pro 14.04 LTS | heimdal | 1.6~git20131207+dfsg-1ubuntu1.2+esm1 |
| Ubuntu Pro 16.04 LTS | heimdal | 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1 |