← Database

CVE-2021-44758

HIGH CVSS: 7.5 Published: 2022-12-26 Modified: 2026-06-17

Description

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.

Affected Platforms

Heimdal Project Heimdal

Weakness Type

CWE-476, CWE-476

References