Test ID:	1.3.6.1.4.1.25623.1.0.705287
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-5287-1)
Summary:	The remote host is missing an update for the Debian 'heimdal' package(s) announced via the DSA-5287-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'heimdal' package(s) announced via the DSA-5287-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. CVE-2021-3671 Joseph Sutton discovered that the Heimdal KDC does not validate that the server name in the TGS-REQ is present before dereferencing, which may result in denial of service. CVE-2021-44758 It was discovered that Heimdal is prone to a NULL dereference in acceptors where an initial SPNEGO token that has no acceptable mechanisms, which may result in denial of service for a server application that uses SPNEGO. CVE-2022-3437 Several buffer overflow flaws and non-constant time leaks were discovered when using 1DES, 3DES or RC4 (arcfour). CVE-2022-41916 An out-of-bounds memory access was discovered when Heimdal normalizes Unicode, which may result in denial of service. CVE-2022-42898 It was discovered that integer overflows in PAC parsing may result in denial of service for Heimdal KDCs or possibly Heimdal servers. CVE-2022-44640 It was discovered that the Heimdal's ASN.1 compiler generates code that allows specially crafted DER encodings to invoke an invalid free on the decoded structure upon decode error, which may result in remote code execution in the Heimdal KDC. For the stable distribution (bullseye), these problems have been fixed in version 7.7.0+dfsg-2+deb11u2. We recommend that you upgrade your heimdal packages. For the detailed security status of heimdal please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'heimdal' package(s) on Debian 11. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3671 Debian Security Information: DSA-5287 (Google Search) https://www.debian.org/security/2022/dsa-5287 https://bugzilla.redhat.com/show_bug.cgi?id=2013080, https://bugzilla.samba.org/show_bug.cgi?id=14770, https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a https://lists.debian.org/debian-lts-announce/2022/11/msg00034.html Common Vulnerability Exposure (CVE) ID: CVE-2021-44758 https://security.gentoo.org/glsa/202310-06 https://github.com/heimdal/heimdal/commit/f9ec7002cdd526ae84fbacbf153162e118f22580 https://github.com/heimdal/heimdal/security/advisories/GHSA-69h9-669w-88xv Common Vulnerability Exposure (CVE) ID: CVE-2022-3437 https://security.gentoo.org/glsa/202309-06 https://access.redhat.com/security/cve/CVE-2022-3437 https://bugzilla.redhat.com/show_bug.cgi?id=2137774 https://www.samba.org/samba/security/CVE-2022-3437.html https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html http://www.openwall.com/lists/oss-security/2023/02/08/1 Common Vulnerability Exposure (CVE) ID: CVE-2022-41916 https://github.com/heimdal/heimdal/security/advisories/GHSA-mgqr-gvh6-23cx Common Vulnerability Exposure (CVE) ID: CVE-2022-42898 https://bugzilla.samba.org/show_bug.cgi?id=15203 https://web.mit.edu/kerberos/advisories/ Common Vulnerability Exposure (CVE) ID: CVE-2022-44640
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.