https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-3116.htmlhttps://patchthecve.com/cve/CVE-2022-3116.htmlWed, 17 Jun 2026 04:58:53 +0000HIGH 7.5: The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.https://patchthecve.com/cve/CVE-2022-45142.htmlhttps://patchthecve.com/cve/CVE-2022-45142.htmlWed, 17 Jun 2026 05:09:27 +0000HIGH 7.5: The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches (and possibly other branches) a logic inversion sneaked https://patchthecve.com/cve/CVE-2021-44758.htmlhttps://patchthecve.com/cve/CVE-2021-44758.htmlWed, 17 Jun 2026 04:12:49 +0000HIGH 7.5: Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.https://patchthecve.com/cve/CVE-2022-42898.htmlhttps://patchthecve.com/cve/CVE-2022-42898.htmlWed, 14 Oct 2026 19:16:52 +0000HIGH 8.8: PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of servihttps://patchthecve.com/cve/CVE-2022-44640.htmlhttps://patchthecve.com/cve/CVE-2022-44640.htmlWed, 17 Jun 2026 05:08:40 +0000CRITICAL 9.8: Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).https://patchthecve.com/cve/CVE-2022-41916.htmlhttps://patchthecve.com/cve/CVE-2022-41916.htmlWed, 17 Jun 2026 05:04:03 +0000MEDIUM 5.9: Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdal's l