← Database

CVE-2022-41916

MEDIUM CVSS: 5.9 Published: 2022-11-15 Modified: 2026-06-17

Description

Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdal's libhx509. Users should upgrade to Heimdal 7.7.1 or 7.8. There are no known workarounds for this issue.

Affected Platforms

Debian Debian LinuxHeimdal Project Heimdal

Weakness Type

CWE-193, CWE-193

References