CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
mitkerberos_5
1.8 ≤
𝑥
< 1.19.4
mitkerberos_5
1.20
mitkerberos_5
1.20:beta1
heimdal_projectheimdal
𝑥
< 7.7.1
sambasamba
𝑥
< 4.15.12
sambasamba
4.16.0 ≤
𝑥
< 4.16.7
sambasamba
4.17.0 ≤
𝑥
< 4.17.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
heimdal
bookworm
7.8.git20221117.28daf24+dfsg-2
fixed
bullseye
7.7.0+dfsg-2+deb11u3
ignored
bullseye (security)
7.7.0+dfsg-2+deb11u3
fixed
buster
ignored
sid
7.8.git20221117.28daf24+dfsg-8
fixed
trixie
7.8.git20221117.28daf24+dfsg-8
fixed
krb5
bookworm
1.20.1-2+deb12u2
fixed
bookworm (security)
1.20.1-2+deb12u2
fixed
bullseye
1.18.3-6+deb11u5
ignored
bullseye (security)
1.18.3-6+deb11u5
fixed
buster
ignored
sid
1.21.3-3
fixed
trixie
1.21.3-3
fixed
samba
bookworm
2:4.17.12+dfsg-0+deb12u1
fixed
bookworm (security)
2:4.17.12+dfsg-0+deb12u1
fixed
bullseye
ignored
bullseye (security)
vulnerable
buster
ignored
sid
2:4.21.1+dfsg-2
fixed
trixie
2:4.21.1+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
heimdal
bionic
Fixed 7.5.0+dfsg-1ubuntu0.3
released
focal
Fixed 7.7.0+dfsg-1ubuntu1.3
released
jammy
needed
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needed
trusty
Fixed 1.6~git20131207+dfsg-1ubuntu1.2+esm3
released
xenial
Fixed 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3
released
krb5
bionic
Fixed 1.16-2ubuntu0.3
released
focal
Fixed 1.17-6ubuntu4.2
released
jammy
Fixed 1.19.2-2ubuntu0.1
released
kinetic
Fixed 1.20-1ubuntu0.1
released
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
Fixed 1.12+dfsg-2ubuntu5.4+esm3
released
xenial
Fixed 1.13.2+dfsg-5ubuntu2.2+esm3
released
samba
bionic
needed
focal
Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.1
released
jammy
Fixed 2:4.15.13+dfsg-0ubuntu1
released
kinetic
Fixed 2:4.16.8+dfsg-0ubuntu1
released
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
needed
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
krb5
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-32bit
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-client
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-devel
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-doc
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
krb5-plugin-kdb-ldap
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-otp
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-pkinit
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise desktop 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise desktop 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise desktop 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise desktop 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise sap 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP5
1.20.1-150500.1.2
fixed
suse enterprise server 15 SP6
1.20.1-150600.9.2
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
krb5-plugin-preauth-spake
suse enterprise desktop 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
krb5-server
suse enterprise sap 12 SP5
1.12.5-40.43.1
fixed
suse enterprise sap 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise sap 15 SP3
1.19.2-150300.7.7.1
fixed
suse enterprise sap 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.20.1-150600.11.8.1
fixed
suse enterprise server 12 SP2
1.12.5-40.43.1
fixed
suse enterprise server 12 SP3
1.12.5-40.43.1
fixed
suse enterprise server 12 SP4
1.12.5-40.43.1
fixed
suse enterprise server 12 SP5
1.12.5-40.43.1
fixed
suse enterprise server 15
1.15.2-150000.6.17.1
fixed
suse enterprise server 15 SP1
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP2
1.16.3-150100.3.27.1
fixed
suse enterprise server 15 SP3
1.19.2-150300.10.1
fixed
suse enterprise server 15 SP4
1.19.2-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.20.1-150600.11.8.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
krb5-devel
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
krb5-libs
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
krb5-pkinit
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
krb5-server
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
krb5-server-ldap
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
krb5-workstation
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
libkadm5
RHEL 7
0:1.15.1-55.el7_9
fixed
RHEL 8
0:1.18.2-22.el8_7
fixed
RHEL 8.1 E4S
0:1.17-10.el8_1
fixed
RHEL 8.2 AUS
0:1.17-19.el8_2
fixed
RHEL 8.2 E4S
0:1.17-19.el8_2
fixed
RHEL 8.2 TUS
0:1.17-19.el8_2
fixed
RHEL 8.4 AUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 E4S
0:1.18.2-9.el8_4
fixed
RHEL 8.4 EUS
0:1.18.2-9.el8_4
fixed
RHEL 8.4 TUS
0:1.18.2-9.el8_4
fixed
RHEL 8.6 AUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 E4S
0:1.18.2-15.el8_6
fixed
RHEL 8.6 EUS
0:1.18.2-15.el8_6
fixed
RHEL 8.6 TUS
0:1.18.2-15.el8_6
fixed
RHEL 8.8 AUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 E4S
0:1.18.2-25.el8_8
fixed
RHEL 8.8 EUS
0:1.18.2-25.el8_8
fixed
RHEL 8.8 TUS
0:1.18.2-25.el8_8
fixed
RHEL 9
0:1.19.1-24.el9_1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
krb5-debuginfo
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-devel
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-libs
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-pkinit
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-pkinit-openssl
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
krb5-server
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-server-ldap
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
krb5-workstation
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
libkadm5
Amazon Linux 1
0:1.15.1-55.51.amzn1
fixed
Amazon Linux 2
0:1.15.1-55.amzn2.2.5
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
heimdal
CBL-Mariner 1.0
0:7.7.1-1.cm1
fixed
krb5
CBL-Mariner 1.0
0:1.18.4-3.cm1
fixed
CBL-Mariner 2.0
0:1.19.4-1.cm2
fixed
samba
Azure Linux 3.0
0:4.18.3-1.azl3
fixed
Common Weakness Enumeration
References
https://bugzilla.samba.org/show_bug.cgi?id=15203
https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
https://security.gentoo.org/glsa/202309-06
https://security.gentoo.org/glsa/202310-06
https://security.netapp.com/advisory/ntap-20230216-0008/
https://security.netapp.com/advisory/ntap-20230223-0001/
https://web.mit.edu/kerberos/advisories/
https://web.mit.edu/kerberos/krb5-1.19/
https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
https://www.samba.org/samba/security/CVE-2022-42898.html
https://bugzilla.samba.org/show_bug.cgi?id=15203
https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
https://security.gentoo.org/glsa/202309-06
https://security.gentoo.org/glsa/202310-06
https://security.netapp.com/advisory/ntap-20230216-0008/
https://security.netapp.com/advisory/ntap-20230223-0001/
https://web.mit.edu/kerberos/advisories/
https://web.mit.edu/kerberos/krb5-1.19/
https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
https://www.samba.org/samba/security/CVE-2022-42898.html