{"id":"CVE-2021-3671","aliases":["ALPINE-CVE-2021-3671","AZL-37004","AZL-7354","BELL-CVE-2021-3671","DEBIAN-CVE-2021-3671","DLA-3206-1","DSA-5287-1","EUVD-2021-26963","GHSA-ghqf-jx44-h9c5","MGASA-2021-0543","MGASA-2022-0468","OESA-2021-1417","UBUNTU-CVE-2021-3671","USN-5142-1","USN-5174-1","USN-5675-1","openSUSE-SU-2023:0019-1","openSUSE-SU-2023:0020-1","openSUSE-SU-2024:12580-1"],"status":"published","title":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in...","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02118,"percentile":0.81989,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-10-12T00:00:00Z","modified":"2026-10-24T14:25:16Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"samba","fixed_in":["4.14.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.15.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"heimdal","fixed_in":["7.7.0+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"heimdal","fixed_in":["7.7.0+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"heimdal","fixed_in":["7.7.0+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.13.13+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.13.13+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.13.13+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"heimdal","fixed_in":["7.7.0-5.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","fixed_in":["4.11.12-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"samba","fixed_in":["4.11.12-6.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","fixed_in":["1.6~git20131207+dfsg-1ubuntu1.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","fixed_in":["1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","fixed_in":["7.5.0+dfsg-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","fixed_in":["7.7.0+dfsg-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.13.14+dfsg-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.13.14+dfsg-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.14.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"4.15.0-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-3+deb10u1"}]}],"versions":["7.5.0+dfsg-3"],"bundled":7},{"source":"osv","ecosystem":"Debian:11","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-2+deb11u2"}]}],"versions":["7.7.0+dfsg-2","7.7.0+dfsg-2+deb11u1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:8","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0-5.1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-1.2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-6.oe1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2+esm1"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1","1.6~git20131207+dfsg-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1","1.7~git20150920+dfsg-4ubuntu1.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-1ubuntu0.1"}]}],"versions":["7.4.0.dfsg.1-2","7.5.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.26"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-1ubuntu1.1"}]}],"versions":["7.5.0+dfsg-3build1","7.7.0+dfsg-1","7.7.0+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.14+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.14+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.14+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.26"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2+esm1"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1","1.6~git20131207+dfsg-1ubuntu1.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1","1.7~git20150920+dfsg-4ubuntu1.16.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-1ubuntu0.1"}]}],"versions":["7.4.0.dfsg.1-2","7.5.0+dfsg-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-1ubuntu1.1"}]}],"versions":["7.5.0+dfsg-3build1","7.7.0+dfsg-1","7.7.0+dfsg-1ubuntu1"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp154.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp154.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp153.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp153.2.4.1"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"management_services_for_element_software"},{"vendor":"netapp","product":"management_services_for_netapp_hci"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013080%2C","tags":["x_transferred","report"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=14770%2C","tags":["x_transferred","report"]},{"url":"https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2022/dsa-5287","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00034.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221215-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230216-0008/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3671","tags":["web","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013080,"},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=14770,"},{"url":"https://github.com/advisories/GHSA-ghqf-jx44-h9c5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3671","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3671","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3671","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0543.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3671","tags":["advisory","report"]},{"url":"https://advisories.mageia.org/MGASA-2022-0468.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31172","tags":["report"]},{"url":"https://www.debian.org/security/2022/dsa-5286","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3206","tags":["web"]},{"url":"https://github.com/heimdal/heimdal/security/advisories/GHSA-q77c-9qvp-qfw4","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/AYXWFESBZJMBNACFDHWWH7KETGKUXDPO/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1417","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5142-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5174-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5675-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-23192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3116","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WO45C5LQHPOWEJHKWCXPWLI54XMTTYQP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44640","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCW7YX6RG5EAFBRU3SLTXKN5NWVODXTH/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T00:00:00Z","modified":"2024-08-03T17:01:07.967Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-26963","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T00:00:00Z","modified":"2024-08-03T17:01:07Z","updated_at":"2026-11-03T03:25:12.535968Z"}],"ghsa":[{"id":"GHSA-ghqf-jx44-h9c5","title":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in...","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2022-05-24T19:17:17Z","modified":"2023-02-24T05:06:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:13.537745Z"}],"nvd":[{"id":"CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08.357Z","modified":"2026-06-17T04:05:32.43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:59.689345Z"}],"osv":[{"id":"ALPINE-CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08.357Z","modified":"2026-10-23T17:17:56.201130512Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-37004","title":"CVE-2021-3671 affecting package samba for versions less than 4.18.3-1","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08Z","modified":"2026-04-21T04:33:04.007616Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-7354","title":"CVE-2021-3671 affecting package samba 4.12.5-7","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08Z","modified":"2026-04-21T04:33:55.587023Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"BELL-CVE-2021-3671","title":"CVE-2021-3671 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:25.613447Z","modified":"2026-01-26T09:46:50.782122Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08.357Z","modified":"2026-10-24T14:25:16.908425912Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:08.357Z","modified":"2026-10-23T18:03:29.972212636Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1417","title":"samba security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nA null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.(CVE-2021-3671)","status":"published","published":"2021-11-05T11:04:41Z","modified":"2026-08-18T01:16:08.380487654Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-3671","description":"A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.","status":"published","published":"2021-10-12T18:15:00Z","modified":"2026-04-22T12:57:36.719949Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"DLA-3206-1","title":"heimdal - security update","status":"published","published":"2022-11-26T00:00:00Z","modified":"2026-03-09T01:19:51.266692Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5287-1","title":"heimdal - security update","status":"published","published":"2022-11-22T00:00:00Z","modified":"2026-03-09T02:11:16.81337Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2021-0543","title":"Updated heimdal packages fix security vulnerability","description":"A null pointer de-reference was found in the way samba kerberos server\nhandled missing sname in TGS-REQ (Ticket Granting Server - Request).\nAn authenticated user could use this flaw to crash a samba server using\nheimdal\n","status":"published","published":"2021-12-08T20:04:18Z","modified":"2026-04-16T04:42:32.341125285Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"MGASA-2022-0468","title":"Updated heimdal packages fix security vulnerability","description":"Isaac Boukris reported that the Heimdal KDC before 7.7.1 does not apply\ndelegation_not_allowed (aka not-delegated) user attributes for S4U2Self.\nInstead the forwardable flag is set even if the impersonated client has\nthe not-delegated flag set. (CVE-2019-14870)\n\nJoseph Sutton discovered that the Heimdal KDC before 7.7.1 does not check\nfor missing sname in TGS-REQ (Ticket Granting Server Request)\nbefore dereferencing. An authenticated user could use this flaw to\ncrash the KDC. (CVE-2021-3671)\n\nIt was discovered that Heimdal is prone to a NULL dereference in acceptors\nwhen the initial SPNEGO token has no acceptable mechanisms, which may\nresult in denial of service for a server application that uses the Simple\nand Protected GSSAPI Negotiation Mechanism (SPNEGO). (CVE-2021-44758)\n\nEvgeny Legerov reported that the DES and Triple-DES decryption routines in\nthe Heimdal GSSAPI library before 7.7.1 were prone to buffer overflow on\nmalloc() allocated memory when presented with a maliciously small packet.\nIn addition, the Triple-DES and RC4 (arcfour) decryption routine were\nprone to non-constant time leaks, which could potentially yield to a leak\nof secret key material when using these ciphers. (CVE-2022-3437)\n\nIt was discovered that Heimdal's PKI certificate validation library before\n7.7.1 can under some circumstances perform an out-of-bounds memory access\nwhen normalizing Unicode, which may result in denial of service. (CVE-2022-41916)\n\nGreg Hudson discovered an integer multiplication overflow in the Privilege\nAttribute Certificate (PAC) parsing routine, which may result in denial of\nservice for Heimdal KDCs and possibly Heimdal servers (e.g., via GSS-API)\non 32-bit systems. (CVE-2022-42898)\n\nDouglas Bagnall and the Heimdal maintainers independently discovered that\nHeimdal's ASN.1 compiler before 7.7.1 generates code that allows specially\ncrafted DER encodings of CHOICEs to invoke the wrong free() function on the\ndecoded structure upon decode error, which may result in remote code\nexecution in the Heimdal KDC and possibly the Kerberos client, the X.509\nlibrary, and other components as well. (CVE-2022-44640)\n","status":"published","published":"2022-12-17T18:48:08Z","modified":"2026-04-16T04:43:39.031315614Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2023:0019-1","title":"Security update for libheimdal","description":"This update for libheimdal fixes the following issues:\n\nUpdate to version 7.8.0\n\n- CVE-2022-42898 PAC parse integer overflows\n- CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour\n- CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array\n- CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors\n- CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ\n- CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec\n- CVE-2019-14870: Validate client attributes in protocol-transition\n","status":"published","published":"2023-01-16T08:42:44Z","modified":"2026-02-04T03:44:03.250796Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0020-1","title":"Security update for libheimdal","description":"This update for libheimdal fixes the following issues:\n\nUpdate to version 7.8.0\n\n- CVE-2022-42898 PAC parse integer overflows\n- CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour\n- CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array\n- CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors\n- CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ\n- CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec\n- CVE-2019-14870: Validate client attributes in protocol-transition\n","status":"published","published":"2023-01-16T08:42:52Z","modified":"2026-02-04T02:58:44.117973Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12580-1","title":"libasn1-8-7.8.0-1.1 on GA media","description":"These are all security issues fixed in the libasn1-8-7.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:39.768947Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"USN-5142-1","title":"samba vulnerabilities","description":"Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client\nconnections. A remote attacker could possibly use this issue to downgrade\nconnections to plaintext authentication. (CVE-2016-2124)\n\nAndrew Bartlett discovered that Samba incorrectly mapping domain users to\nlocal users. An authenticated attacker could possibly use this issue to\nbecome root on domain members. (CVE-2020-25717)\n\nAndrew Bartlett discovered that Samba did not correctly sandbox Kerberos\ntickets issues by an RODC. An RODC could print administrator tickets,\ncontrary to expectations. (CVE-2020-25718)\n\nAndrew Bartlett discovered that Samba incorrectly handled Kerberos tickets.\nDelegated administrators could possibly use this issue to impersonate\naccounts, leading to total domain compromise. (CVE-2020-25719)\n\nAndrew Bartlett discovered that Samba did not provide stable AD\nidentifiers to Kerberos acceptors. (CVE-2020-25721)\n\nAndrew Bartlett discovered that Samba did not properly check sensitive\nattributes. An authenticated attacker could possibly use this issue to\nescalate privileges. (CVE-2020-25722)\n\nStefan Metzmacher discovered that Samba incorrectly handled certain large\nDCE/RPC requests. A remote attacker could possibly use this issue to\nbypass signature requirements. (CVE-2021-23192)\n\nWilliam Ross discovered that Samba incorrectly handled memory. A remote\nattacker could use this issue to cause Samba to crash, resulting in a\ndenial of service, or possibly escalate privileges. (CVE-2021-3738)\n\nJoseph Sutton discovered that Samba incorrectly handled certain TGS\nrequests. An authenticated attacker could possibly use this issue to cause\nSamba to crash, resulting in a denial of service. (CVE-2021-3671)\n\nThe fix for CVE-2020-25717 results in possible behaviour changes that could\naffect certain environments. Please see the upstream advisory for more\ninformation:\n\nhttps://www.samba.org/samba/security/CVE-2020-25717.html\n","status":"published","published":"2021-11-11T13:02:13Z","modified":"2026-04-27T19:17:38.785898401Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5174-1","title":"samba vulnerabilities","description":"Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client\nconnections. A remote attacker could possibly use this issue to downgrade\nconnections to plaintext authentication. (CVE-2016-2124)\n\nAndrew Bartlett discovered that Samba incorrectly mapping domain users to\nlocal users. An authenticated attacker could possibly use this issue to\nbecome root on domain members. (CVE-2020-25717)\n\nAndrew Bartlett discovered that Samba did not properly check sensitive\nattributes. An authenticated attacker could possibly use this issue to\nescalate privileges. (CVE-2020-25722)\n\nJoseph Sutton discovered that Samba incorrectly handled certain TGS\nrequests. An authenticated attacker could possibly use this issue to cause\nSamba to crash, resulting in a denial of service. (CVE-2021-3671)\n\nThe fix for CVE-2020-25717 results in possible behaviour changes that could\naffect certain environments. Please see the upstream advisory for more\ninformation:\n\nhttps://www.samba.org/samba/security/CVE-2020-25717.html\n","status":"published","published":"2021-12-06T13:29:33Z","modified":"2026-04-27T16:00:31.036737Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5675-1","title":"heimdal vulnerabilities","description":"Isaac Boukris and Andrew Bartlett discovered that Heimdal's KDC was\nnot properly performing checksum algorithm verifications in the\nS4U2Self extension module. An attacker could possibly use this issue\nto perform a machine-in-the-middle attack and request S4U2Self\ntickets for any user known by the application. This issue only\naffected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS.\n(CVE-2018-16860)\n\nIt was discovered that Heimdal was not properly handling the\nverification of key exchanges when an anonymous PKINIT was being\nused. An attacker could possibly use this issue to perform a\nmachine-in-the-middle attack and expose sensitive information.\nThis issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and\nUbuntu 18.04 LTS. (CVE-2019-12098)\n\nJoseph Sutton discovered that Heimdal was not properly handling\nmemory management operations when dealing with TGS-REQ tickets that\nwere missing information. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2021-3671)\n\nMichał Kępień discovered that Heimdal was not properly handling\nlogical conditions that related to memory management operations. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2022-3116)\n","status":"published","published":"2022-10-13T18:39:02Z","modified":"2026-06-29T13:48:24.901222427Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}