Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdals PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdals libhx509. Users should upgrade to Heimdal 7.7.1 or 7.8. There are no known workarounds for this issue.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Heimdal | Heimdal_project | * | 7.7.1 (excluding) |
| Heimdal | Ubuntu | bionic | * |
| Heimdal | Ubuntu | devel | * |
| Heimdal | Ubuntu | esm-apps/jammy | * |
| Heimdal | Ubuntu | esm-apps/noble | * |
| Heimdal | Ubuntu | esm-infra/xenial | * |
| Heimdal | Ubuntu | focal | * |
| Heimdal | Ubuntu | jammy | * |
| Heimdal | Ubuntu | kinetic | * |
| Heimdal | Ubuntu | lunar | * |
| Heimdal | Ubuntu | mantic | * |
| Heimdal | Ubuntu | noble | * |
| Heimdal | Ubuntu | oracular | * |
| Heimdal | Ubuntu | trusty | * |
| Heimdal | Ubuntu | trusty/esm | * |
| Heimdal | Ubuntu | upstream | * |
| Heimdal | Ubuntu | xenial | * |