NULL pointer dereference in Heimdal Software Kerberos
Priority MEDIUM 41CWE-476Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-476.
Summary
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00892 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Heimdal Software Kerberos | Heimdal Software Kerberos 5 | — | No fix listed | CNA |
- Heimdal Software Kerberos Vendor— Affected Heimdal Software Kerberos 5 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:* | up to 7.7.0 | Vulnerable | Heimdal Project |
- cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:* Versions up to 7.7.0 Vulnerable ·Heimdal Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3116
- 2026-10-03 Alias added: GHSA-c662-3p6q-p5c7
References
More Heimdal Project Heimdal vulnerabilities
- TI-2011-04182 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… CVSS 2.0HIGH 10.0
- TI-2022-21958 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an… CVSS 3.1CRITICAL 9.8
- TI-2004-00398 k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a… CVSS 3.1CRITICAL 9.8
- TI-2022-20894 PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has… CVSS 3.1HIGH 8.8
- TI-2017-08165 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre… CVSS 3.1HIGH 8.1
- TI-2021-20265 Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO… CVSS 3.1HIGH 7.5
Sources
- CVE-2022-3116 · CVE Program
- CVE-2022-3116 · NVD
- FIRST EPSS
- GHSA-c662-3p6q-p5c7 · GitHub Advisory Database · CC BY 4.0
- CVE-2022-3116 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences