CVE-2021-44758

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-44758

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44758.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-44758

Aliases

GHSA-69h9-669w-88xv

Related

Published

2022-12-26T05:15:10Z

Modified

2024-10-12T08:38:11.597050Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferredmechtype of GSSCNOOID and a nonzero initialresponse value to send_accept.

References

Affected packages

Alpine:v3.14 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

Alpine:v3.15 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Alpine:v3.16 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Alpine:v3.17 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Alpine:v3.18 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Alpine:v3.19 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Alpine:v3.20 / heimdal

Package

Name: heimdal
Purl: pkg:apk/alpine/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.1-r0

Affected versions

1.*

1.2.1-r0

1.2.1-r1

1.2.1-r2

1.2.1-r3

1.2.1-r4

1.3.1-r0

1.3.1-r1

1.3.1-r2

1.3.1-r3

1.3.1-r4

1.3.1-r5

1.3.3-r0

1.4-r0

1.4-r1

1.4-r2

1.4-r3

1.4-r4

1.4-r5

1.4-r6

1.4-r7

1.4-r8

1.4-r9

1.4-r10

1.4-r11

1.5-r2

1.5.2-r3

1.5.2-r4

1.5.2-r5

1.5.2-r6

1.5.2-r7

1.5.2-r8

1.5.3-r0

1.5.3-r1

1.6_rc2-r1

1.6_rc2-r2

1.6_rc2-r3

1.6_rc2-r4

1.6_rc2-r5

7.*

7.1.0-r0

7.1.0-r1

7.4.0-r0

7.4.0-r1

7.4.0-r2

7.5.0-r0

7.5.0-r1

7.5.0-r2

7.5.0-r3

7.5.0-r4

7.7.0-r0

7.7.0-r1

7.7.0-r2

7.7.0-r3

7.7.0-r4

7.7.0-r5

7.7.0-r6

7.7.0-r7

7.7.0-r8

Debian:11 / heimdal

Package

Name: heimdal
Purl: pkg:deb/debian/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.7.0+dfsg-2+deb11u2

Affected versions

7.*

7.7.0+dfsg-2

7.7.0+dfsg-2+deb11u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / heimdal

Package

Name: heimdal
Purl: pkg:deb/debian/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.8.git20221115.a6cf945+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / heimdal

Package

Name: heimdal
Purl: pkg:deb/debian/heimdal?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.8.git20221115.a6cf945+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/heimdal/heimdal

Affected ranges

Type: GIT
Repo: https://github.com/heimdal/heimdal
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

f9ec7002cdd526ae84fbacbf153162e118f22580

Affected versions

Other

git2svn-syncpoint-master

switch-from-svn-to-git

heimdal-1.*

heimdal-1.3.0pre1

heimdal-1.3.0pre10

heimdal-1.3.0pre11

heimdal-1.3.0pre3

heimdal-1.3.0pre4

heimdal-1.3.0pre5

heimdal-1.3.0pre6

heimdal-1.3.0pre7

heimdal-1.3.0pre8

heimdal-1.3.0pre9

heimdal-1.3.0rc1

heimdal-1.5pre1

heimdal-1.5pre2

heimdal-7.*

heimdal-7.0.1

heimdal-7.0.2

heimdal-7.0.3

heimdal-7.1.0

heimdal-7.1rc1

heimdal-7.2.0

heimdal-7.3.0

heimdal-7.4.0

heimdal-7.5.0

heimdal-7.6.0

heimdal-7.7.0

upstream-1.*

upstream-1.4.0+git20101228.dfsg.1

upstream-1.4.0+git20110220.dfsg.1