8.8

CVE-2022-42898: heimdal_project heimdal Integer Overflow or Wraparound

Modified
AliasesALPINE-CVE-2022-42898MGASA-2022-0467SUSE-SU-2022:4153-1
Published 25-12-2022Last modified 14-10-2026

Vulnerability summary

CVE-2022-42898 is a high (CVSS 8.8) Integer Overflow or Wraparound vulnerability in heimdal_project heimdal. EPSS estimates a 6.86% chance of exploitation in the next 30 days, higher than 94% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
6.86%
0%100%
Low · +0.65 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 15 · Related 12
DLA-3206-1DSA-5287-1MGASA-2022-0468MGASA-2023-0010OPENSUSE-SU-2023:0019-1OPENSUSE-SU-2023:0020-1

Timeline

  1. 25-12-2022
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

6.86%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

Increase +0.65 pp

From 6.21% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (bugzilla.samba.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse40 products
  • krb5&distro=SUSE Enterprise Storage 6< 1.16.3-150100.3.27.1
  • krb5&distro=SUSE Enterprise Storage 7< 1.16.3-150100.3.27.1
  • krb5&distro=SUSE Enterprise Storage 7.1< 1.19.2-150300.10.1
  • krb5&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.16.3-150100.3.27.1
  • krb5&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.16.3-150100.3.27.1
Redhat20 products
  • krb5< 0:1.18.2-25.el8_8 | < 0:1.19.1-24.el9_1 | < 0:1.18.2-22.el8_7 | < 0:1.18.2-9.el8_4 | < 0:1.15.1-55.el7_9 | < 0:1.17-10.el8_1 | < 0:1.17-19.el8_2 | < 0:1.18.2-15.el8_6 | < 0:1.10.3-66.el6_10 | < 0:1.19.1-16.el9_0
  • krb5-debuginfo< 0:1.18.2-25.el8_8 | < 0:1.19.1-24.el9_1 | < 0:1.18.2-22.el8_7 | < 0:1.18.2-9.el8_4 | < 0:1.15.1-55.el7_9 | < 0:1.17-10.el8_1 | < 0:1.17-19.el8_2 | < 0:1.18.2-15.el8_6 | < 0:1.10.3-66.el6_10 | < 0:1.19.1-16.el9_0
  • krb5-debugsource< 0:1.18.2-25.el8_8 | < 0:1.19.1-24.el9_1 | < 0:1.18.2-22.el8_7 | < 0:1.18.2-9.el8_4 | < 0:1.17-10.el8_1 | < 0:1.17-19.el8_2 | < 0:1.18.2-15.el8_6 | < 0:1.19.1-16.el9_0
  • krb5-devel< 0:1.18.2-25.el8_8 | < 0:1.19.1-24.el9_1 | < 0:1.18.2-22.el8_7 | < 0:1.18.2-9.el8_4 | < 0:1.15.1-55.el7_9 | < 0:1.17-10.el8_1 | < 0:1.17-19.el8_2 | < 0:1.18.2-15.el8_6 | < 0:1.10.3-66.el6_10 | < 0:1.19.1-16.el9_0
  • krb5-devel-debuginfo< 0:1.18.2-25.el8_8 | < 0:1.18.2-22.el8_7 | < 0:1.18.2-9.el8_4 | < 0:1.17-10.el8_1 | < 0:1.17-19.el8_2 | < 0:1.18.2-15.el8_6
Opensuse7 products
  • krb5-mini&distro=openSUSE Leap 15.3< 1.19.2-150300.7.7.1
  • krb5&distro=openSUSE Leap 15.3< 1.19.2-150300.7.7.1
  • krb5&distro=openSUSE Leap 15.4< 1.19.2-150400.3.3.1
  • krb5&distro=openSUSE Leap Micro 5.2< 1.19.2-150300.7.7.1 | < 1.19.2-150300.10.1
  • krb5&distro=openSUSE Leap Micro 5.3< 1.19.2-150400.3.3.1
Alpine3 products
  • heimdal< 7.7.1-r0
  • krb5< 1.19.4-r0 | < 1.20.1-r0
  • samba≥ 4.16.0, < 4.15.12-r0 | ≥ 4.16.0, < 4.16.7-r0
Debian3 products
  • heimdal< 7.8.git20221115.a6cf945+dfsg-1
  • krb5< 1.18.3-6+deb11u3 | < 1.17-3+deb10u5 | < 1.20.1-1
  • samba< 2:4.17.3+dfsg-1
Ubuntu3 products
  • heimdal< 1.6~git20131207+dfsg-1ubuntu1.2+esm3 | < 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 | < 7.5.0+dfsg-1ubuntu0.3 | < 7.7.0+dfsg-1ubuntu1.3 | All versions (No fix recorded)
  • krb5< 1.12+dfsg-2ubuntu5.4+esm3 | < 1.13.2+dfsg-5ubuntu2.2+esm3 | < 1.16-2ubuntu0.3 | < 1.17-6ubuntu4.2 | < 1.19.2-2ubuntu0.1
  • samba< 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13 | < 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2 | < 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1 | < 2:4.15.13+dfsg-0ubuntu0.20.04.1 | < 2:4.15.13+dfsg-0ubuntu1
Heimdal_project1 product
Mageia1 product
  • krb5< 1.18.3-1.3.mga8
Mit1 product
Samba1 product
  • samba< 4.15.12 | ≥ 4.16.0, < 4.16.7 | ≥ 4.17.0, < 4.17.3

10 vendors · 80 products

References

63 links
Show all 63 references