Read the docs
TI-2022-20894 Aliases CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has…

Priority MEDIUM 50CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.06858 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 10 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*1.8 to before 1.19.4Vulnerablemoos-ivp
cpe:2.3:a:mit:kerberos_5:1.20:-:*:*:*:*:*:*1.20Vulnerablemoos-ivp
cpe:2.3:a:mit:kerberos_5:1.20:beta1:*:*:*:*:*:*1.20 beta1Vulnerablemoos-ivp
cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*before 7.7.1VulnerableHeimdal Project
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*before 4.15.12; 4.16.0 to before 4.16.7; 4.17.0 to before 4.17.3VulnerableSamba
  • cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* Versions 1.8 to before 1.19.4 Vulnerable ·moos-ivp
  • cpe:2.3:a:mit:kerberos_5:1.20:-:*:*:*:*:*:* Versions 1.20 Vulnerable ·moos-ivp
  • cpe:2.3:a:mit:kerberos_5:1.20:beta1:*:*:*:*:*:* Versions 1.20 beta1 Vulnerable ·moos-ivp
  • cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:* Versions before 7.7.1 Vulnerable ·Heimdal Project
  • cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions before 4.15.12; 4.16.0 to before 4.16.7; 4.17.0 to before 4.17.3 Vulnerable ·Samba

Remediation

Red Hat 10 advisories

  • RHSA-2022:9029 Released 2022-12-14 · Red Hat rating Important
    Red Hat Virtualization Host security update [ovirt-4.5.3-3]
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202212070734_8.6, redhat-virtualization-host-image-update-4.5.3-202212070734_8.6
  • RHSA-2022:8669 Released 2022-11-29 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) krb5-devel-1.19.1-16.el9_0
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) krb5-1.19.1-16.el9_0, krb5-libs-1.19.1-16.el9_0, krb5-pkinit-1.19.1-16.el9_0 +4
  • RHSA-2022:8663 Released 2022-11-29 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux Server (v. 6 ELS) krb5-1.10.3-66.el6_10, krb5-devel-1.10.3-66.el6_10, krb5-libs-1.10.3-66.el6_10 +5
Show 7 more Red Hat advisories
  • RHSA-2022:8662 Released 2022-11-29 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) krb5-1.18.2-15.el8_6, krb5-devel-1.18.2-15.el8_6, krb5-libs-1.18.2-15.el8_6 +5
  • RHSA-2022:8648 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
    • Red Hat Enterprise Linux BaseOS TUS (v. 8.2) krb5-1.17-19.el8_2, krb5-devel-1.17-19.el8_2, krb5-libs-1.17-19.el8_2 +5
  • RHSA-2022:8640 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux Client (v. 7) krb5-1.15.1-55.el7_9, krb5-libs-1.15.1-55.el7_9, krb5-pkinit-1.15.1-55.el7_9 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) krb5-devel-1.15.1-55.el7_9, krb5-server-1.15.1-55.el7_9, krb5-server-ldap-1.15.1-55.el7_9
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) krb5-devel-1.15.1-55.el7_9, krb5-server-1.15.1-55.el7_9, krb5-server-ldap-1.15.1-55.el7_9
    • Red Hat Enterprise Linux Server (v. 7) krb5-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9.ppc +8
    • Red Hat Enterprise Linux Workstation (v. 7) krb5-1.15.1-55.el7_9, krb5-devel-1.15.1-55.el7_9, krb5-libs-1.15.1-55.el7_9 +5
  • RHSA-2022:8641 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.1) krb5-1.17-10.el8_1, krb5-devel-1.17-10.el8_1, krb5-libs-1.17-10.el8_1 +5
  • RHSA-2022:8639 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.4) krb5-1.18.2-9.el8_4, krb5-devel-1.18.2-9.el8_4, krb5-libs-1.18.2-9.el8_4 +5
  • RHSA-2022:8638 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux BaseOS (v. 8) krb5-1.18.2-22.el8_7, krb5-devel-1.18.2-22.el8_7, krb5-libs-1.18.2-22.el8_7 +5
  • RHSA-2022:8637 Released 2022-11-28 · Red Hat rating Important
    krb5 security update
    • Red Hat Enterprise Linux AppStream (v. 9) krb5-devel-1.19.1-24.el9_1
    • Red Hat Enterprise Linux BaseOS (v. 9) krb5-1.19.1-24.el9_1, krb5-libs-1.19.1-24.el9_1, krb5-pkinit-1.19.1-24.el9_1 +4

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2022:8637
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2022:8669
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2022:8638
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2022:8637
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2022:8648
Red Hat Enterprise Linux BaseOS E4S (v. 8.1)Fixed RHSA-2022:8641
Red Hat Enterprise Linux BaseOS E4S (v. 8.2)Fixed RHSA-2022:8648
Red Hat Enterprise Linux BaseOS EUS (v.8.4)Fixed RHSA-2022:8639
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2022:8662
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2022:8669
Red Hat Enterprise Linux BaseOS TUS (v. 8.2)Fixed RHSA-2022:8648
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2022:8640
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2022:8640
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2022:8640
Red Hat Enterprise Linux Server (v. 6 ELS)Fixed RHSA-2022:8663
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2022:8640
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2022:8640
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2022:9029
Not affected: 6 products
  • RHEL 8-based RHEV-H for RHEV 4 (build requirements)
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Storage 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-42898

References

Exploit 1

Patch 1

Advisory 7

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences