CVE-2021-44758 Null dereference in n/a

What is CVE-2021-44758?

CVE-2021-44758 is a high-severity vulnerability in n/a, published on 26 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.

Weakness: CWE-476

Which versions are affected by CVE-2021-44758?

It affects 1 product.

Products include Heimdal Project Heimdal.

How do I fix CVE-2021-44758?

Upgrade to a fixed version.

Is CVE-2021-44758 being exploited?

There is no known exploitation of CVE-2021-44758 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-44640 Use after free in n/a Critical 9.8
• CVE-2022-42898 Integer overflow in n/a High 8.8
• CVE-2022-3116 Null dereference in Heimdal Software Kerberos High 7.5
• CVE-2022-45142 Security feature bypass in Samba High 7.5
• CVE-2018-16860 Auth bypass in samba High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2021-44758, AZL-44859, CLEANSTART-2024-UF28552, DEBIAN-CVE-2021-44758, GHSA-69h9-669w-88xv, UBUNTU-CVE-2021-44758.