Upstream information
Description
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
National Vulnerability Database | |
---|---|
Base Score | 9.8 |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | High |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- openSUSE-SU-2023:0019-1, published Mon Jan 16 16:43:41 2023
- openSUSE-SU-2023:0020-1, published Mon Jan 16 16:43:41 2023
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Package Hub 15 SP3 |
| Patchnames: openSUSE-2023-20 |
SUSE Package Hub 15 SP4 |
| Patchnames: openSUSE-2023-19 |
openSUSE Leap 15.3 |
| Patchnames: openSUSE-2023-20 |
openSUSE Leap 15.4 |
| Patchnames: openSUSE-2023-19 |
openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA ctdb-4.17.4+git.300.305b22bfce-1.1 openSUSE Tumbleweed GA libasn1-8-7.8.0-1.1 |
SUSE Timeline for this CVE
CVE page created: Tue Nov 22 22:00:09 2022CVE page last modified: Mon Jan 16 22:50:25 2023