Log in Start free

Vulnerability · Published Dec 25, 2022 · Assigned by mitre

CVE-2022-42898

High 8.8

In plain English

A high-severity integer overflow in the krb5-devel package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.9% (higher than 94% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)6.9%top 5.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8krb5-devel1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-devel1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8krb5-libs1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-libs1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8krb5-pkinit1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-pkinit1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8krb5-server1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-server1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8krb5-server-ldap1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-server-ldap1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8krb5-workstation1.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9krb5-workstation1.19.1-24.el9_1ALSA-2022:8637
AlmaLinux:8libkadm51.18.2-22.el8_7ALSA-2022:8638
AlmaLinux:9libkadm51.19.1-24.el9_1ALSA-2022:8637
Alpine:v3.20heimdal7.7.1-r0ALPINE-CVE-2022-42898
Alpine:v3.21heimdal7.7.1-r0ALPINE-CVE-2022-42898
Alpine:v3.22heimdal7.7.1-r0ALPINE-CVE-2022-42898
Alpine:v3.23heimdal7.7.1-r0ALPINE-CVE-2022-42898
Alpine:v3.24heimdal7.7.1-r0ALPINE-CVE-2022-42898
Alpine:v3.20krb51.20.1-r0ALPINE-CVE-2022-42898
Alpine:v3.21krb51.20.1-r0ALPINE-CVE-2022-42898
Alpine:v3.22krb51.20.1-r0ALPINE-CVE-2022-42898
Alpine:v3.23krb51.20.1-r0ALPINE-CVE-2022-42898
Alpine:v3.24krb51.20.1-r0ALPINE-CVE-2022-42898
Alpine:v3.20samba4.16.7-r0ALPINE-CVE-2022-42898
Alpine:v3.21samba4.16.7-r0ALPINE-CVE-2022-42898
Alpine:v3.22samba4.16.7-r0ALPINE-CVE-2022-42898
Alpine:v3.23samba4.16.7-r0ALPINE-CVE-2022-42898
Alpine:v3.24samba4.16.7-r0ALPINE-CVE-2022-42898
Debian:12heimdal7.8.git20221115.a6cf945+dfsg-1DEBIAN-CVE-2022-42898
Debian:13heimdal7.8.git20221115.a6cf945+dfsg-1DEBIAN-CVE-2022-42898
Debian:14heimdal7.8.git20221115.a6cf945+dfsg-1DEBIAN-CVE-2022-42898
Debian:12krb51.20.1-1DEBIAN-CVE-2022-42898
Debian:13krb51.20.1-1DEBIAN-CVE-2022-42898
Debian:14krb51.20.1-1DEBIAN-CVE-2022-42898
Debian:12samba2:4.17.3+dfsg-1DEBIAN-CVE-2022-42898
Debian:13samba2:4.17.3+dfsg-1DEBIAN-CVE-2022-42898
Debian:14samba2:4.17.3+dfsg-1DEBIAN-CVE-2022-42898
Rocky Linux:8krb50:1.18.2-22.el8_7RLSA-2022:8638
Rocky Linux:9krb50:1.19.1-24.el9_1RLSA-2022:8637
Ubuntu:22.04:LTSheimdalno fix listedUBUNTU-CVE-2022-42898
Ubuntu:24.04:LTSheimdalno fix listedUBUNTU-CVE-2022-42898
Ubuntu:25.10heimdalno fix listedUBUNTU-CVE-2022-42898
Ubuntu:26.04:LTSheimdalno fix listedUBUNTU-CVE-2022-42898
Ubuntu:26.10heimdalno fix listedUBUNTU-CVE-2022-42898
Ubuntu:22.04:LTSkrb51.19.2-2ubuntu0.1UBUNTU-CVE-2022-42898
Ubuntu:22.04:LTSkrb51.19.2-2ubuntu0.1USN-5828-1
Ubuntu:22.04:LTSsamba2:4.15.13+dfsg-0ubuntu1UBUNTU-CVE-2022-42898
Ubuntu:22.04:LTSsamba2:4.15.13+dfsg-0ubuntu1USN-5822-1

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References