Vulnerability CVE-2021-44758
Published: 2022-12-26

Description:
Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.

 References:
https://github.com/heimdal/heimdal/security/advisories/GHSA-69h9-669w-88xv
https://github.com/heimdal/heimdal/commit/f9ec7002cdd526ae84fbacbf153162e118f22580
Copyright 2026, cxsecurity.com

 

Back to Top