CVE catalog

CVE-2022-42898

samba: CVE-2022-42898

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Nov 15, 2022, 11:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 6.53% · Oct 22, 2026

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	krb5	sid	`1.22.1-3`	fixed
Debian	krb5	forky	`1.22.1-3`	fixed
Debian	krb5	trixie	`1.21.3-5+deb13u1`	fixed
Debian	krb5	trixie-security	`1.21.3-5+deb13u1`	fixed
Debian	krb5	bookworm	`1.20.1-2+deb12u5`	fixed
Debian	krb5	bookworm-security	`1.20.1-2+deb12u5`	fixed
Debian	samba	sid	`2:4.25.0+dfsg-1`	fixed
Debian	samba	forky	`2:4.25.0+dfsg-1`	fixed
Debian	samba	trixie	`2:4.22.11+dfsg-0+deb13u1`	fixed
Debian	samba	trixie-security	`2:4.22.10+dfsg-0+deb13u2`	fixed
Debian	samba	bookworm	`2:4.17.12+dfsg-0+deb12u4`	fixed
Debian	samba	bookworm-security	`2:4.17.12+dfsg-0+deb12u4`	fixed
Debian	heimdal	sid	`7.8.git20240113.1b4565a+dfsg-2`	fixed
Debian	heimdal	forky	`7.8.git20240113.1b4565a+dfsg-2`	fixed
Debian	heimdal	trixie	`7.8.git20221117.28daf24+dfsg-9+deb13u1`	fixed
Debian	heimdal	bookworm	`7.8.git20221117.28daf24+dfsg-2`	fixed
Cpe	kerberos_5	Not reported	Not reported	unknown
Cpe	heimdal	Not reported	`7.7.1`	fixed
Cpe	samba	Not reported	`4.17.3`	fixed
Opensuse	samba	tumbleweed	`4.17.3+git.279.ff9bb8a298-1.1`	fixed
Suse	krb5	openstack cloud 9	`1.12.5-40.43.1`	fixed
Suse	krb5	openstack cloud crowbar 9	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp4	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise software development kit 12 sp5	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server 12 sp2-bcl	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server 12 sp3-bcl	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server 12 sp4-ltss	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server 12 sp5	`1.12.5-40.43.1`	fixed
Suse	krb5	linux enterprise server for sap applications 12 sp5	`1.12.5-40.43.1`	fixed
Opensuse	krb5	tumbleweed	`1.20.1-1.1`	fixed
Suse	krb5	linux enterprise module for basesystem 15 sp3	`1.19.2-150300.7.7.1`	fixed
Suse	krb5	linux enterprise module for server applications 15 sp3	`1.19.2-150300.7.7.1`	fixed
Suse	krb5	linux enterprise micro 5.1	`1.19.2-150300.7.7.1`	fixed
Suse	krb5	linux enterprise micro 5.2	`1.19.2-150300.7.7.1`	fixed
Opensuse	krb5	leap micro 5.2	`1.19.2-150300.7.7.1`	fixed
Opensuse	krb5	leap 15.3	`1.19.2-150300.7.7.1`	fixed
Opensuse	krb5-mini	leap 15.3	`1.19.2-150300.7.7.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp1-espos	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp1-ltss	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp2-espos	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp2-ltss	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server 15 sp1-bcl	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server 15 sp1-ltss	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server 15 sp2-bcl	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server 15 sp2-ltss	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server for sap applications 15 sp1	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise server for sap applications 15 sp2	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	manager proxy 4.1	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	manager retail branch server 4.1	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	manager server 4.1	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	enterprise storage 6	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	enterprise storage 7	`1.16.3-150100.3.27.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp3-espos	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise high performance computing 15 sp3-ltss	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise real time 15 sp3	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise server 15 sp3-ltss	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise server for sap applications 15 sp3	`1.19.2-150300.10.1`	fixed
Suse	krb5	manager proxy 4.2	`1.19.2-150300.10.1`	fixed
Suse	krb5	manager retail branch server 4.2	`1.19.2-150300.10.1`	fixed
Suse	krb5	manager server 4.2	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise micro 5.1	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise micro 5.2	`1.19.2-150300.10.1`	fixed
Suse	krb5	enterprise storage 7.1	`1.19.2-150300.10.1`	fixed
Opensuse	krb5	leap micro 5.2	`1.19.2-150300.10.1`	fixed
Suse	krb5	linux enterprise micro 5.3	`1.19.2-150400.3.3.1`	fixed
Suse	krb5	linux enterprise module for basesystem 15 sp4	`1.19.2-150400.3.3.1`	fixed
Suse	krb5	linux enterprise module for server applications 15 sp4	`1.19.2-150400.3.3.1`	fixed
Opensuse	krb5	leap micro 5.3	`1.19.2-150400.3.3.1`	fixed
Opensuse	krb5	leap 15.4	`1.19.2-150400.3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	krb5	source	sid	`1.20.1-1`	not yet assigned	Not reported	[1024267]
Debian	krb5	source	forky	`1.20.1-1`	not yet assigned	Not reported	[1024267]
Debian	krb5	source	trixie	`1.20.1-1`	not yet assigned	Not reported	[1024267]
Debian	krb5	source	bookworm	`1.20.1-1`	not yet assigned	Not reported	[1024267]
Debian	samba	source	sid	`2:4.17.3+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	forky	`2:4.17.3+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	trixie	`2:4.17.3+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	bookworm	`2:4.17.3+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	heimdal	source	sid	`7.8.git20221115.a6cf945+dfsg-1`	not yet assigned	Not reported	[1024187]
Debian	heimdal	source	forky	`7.8.git20221115.a6cf945+dfsg-1`	not yet assigned	Not reported	[1024187]
Debian	heimdal	source	trixie	`7.8.git20221115.a6cf945+dfsg-1`	not yet assigned	Not reported	[1024187]
Debian	heimdal	source	bookworm	`7.8.git20221115.a6cf945+dfsg-1`	not yet assigned	Not reported	[1024187]
Cpe	heimdal	cpe	Not reported	`7.7.1`	Not reported	NVD-CVE-2022-42898	Not reported
Cpe	samba	cpe	Not reported	`4.17.3`	Not reported	NVD-CVE-2022-42898	Not reported
Opensuse	samba	rpm	tumbleweed	`4.17.3+git.279.ff9bb8a298-1.1`	Not reported	OPENSUSE-SU-2024:12525-1	Not reported
Suse	krb5	rpm	openstack cloud 9	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	openstack cloud crowbar 9	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp4	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise software development kit 12 sp5	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp2-bcl	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp3-bcl	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp4-ltss	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server 12 sp5	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 12 sp5	`1.12.5-40.43.1`	Not reported	SUSE-SU-2022:4335-1	Not reported
Opensuse	krb5	rpm	tumbleweed	`1.20.1-1.1`	Not reported	OPENSUSE-SU-2024:12524-1	Not reported
Suse	krb5	rpm	linux enterprise module for basesystem 15 sp3	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Suse	krb5	rpm	linux enterprise module for server applications 15 sp3	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Suse	krb5	rpm	linux enterprise micro 5.1	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Suse	krb5	rpm	linux enterprise micro 5.2	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Opensuse	krb5	rpm	leap micro 5.2	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Opensuse	krb5	rpm	leap 15.3	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Opensuse	krb5-mini	rpm	leap 15.3	`1.19.2-150300.7.7.1`	Not reported	SUSE-SU-2022:4167-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp1-espos	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp2-espos	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp2-ltss	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server 15 sp1-bcl	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server 15 sp1-ltss	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server 15 sp2-bcl	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server 15 sp2-ltss	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 15 sp1	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 15 sp2	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	manager proxy 4.1	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	manager retail branch server 4.1	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	manager server 4.1	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	enterprise storage 6	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	enterprise storage 7	`1.16.3-150100.3.27.1`	Not reported	SUSE-SU-2022:4155-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp3-espos	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise real time 15 sp3	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise server 15 sp3-ltss	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise server for sap applications 15 sp3	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	manager proxy 4.2	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	manager retail branch server 4.2	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	manager server 4.2	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise micro 5.1	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise micro 5.2	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	enterprise storage 7.1	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Opensuse	krb5	rpm	leap micro 5.2	`1.19.2-150300.10.1`	Not reported	SUSE-SU-2023:0198-1	Not reported
Suse	krb5	rpm	linux enterprise micro 5.3	`1.19.2-150400.3.3.1`	Not reported	SUSE-SU-2022:4153-1	Not reported
Suse	krb5	rpm	linux enterprise module for basesystem 15 sp4	`1.19.2-150400.3.3.1`	Not reported	SUSE-SU-2022:4153-1	Not reported
Suse	krb5	rpm	linux enterprise module for server applications 15 sp4	`1.19.2-150400.3.3.1`	Not reported	SUSE-SU-2022:4153-1	Not reported
Opensuse	krb5	rpm	leap micro 5.3	`1.19.2-150400.3.3.1`	Not reported	SUSE-SU-2022:4153-1	Not reported
Opensuse	krb5	rpm	leap 15.4	`1.19.2-150400.3.3.1`	Not reported	SUSE-SU-2022:4153-1	Not reported

[Debian bug #1024267][Debian bug #1024187]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[ctdb]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[ctdb-pcp-pmda]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[krb5-32bit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-client]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-devel]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-devel-32bit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-kdb-ldap]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-otp]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-pkinit]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-plugin-preauth-spake]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[krb5-server]Unknown
Source package: [krb5]
Details (1)
- 1.22.2-4.2 · x86_64 · tumbleweed
  Unknown · Fixed: 1.20.1-1.1
  Version impact unknown
  dsa · krb5 · opensuse · tumbleweed
[ldb-tools]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb2]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb2-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb-devel]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[python3-ldb]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[python3-ldb-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc-libs]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc-libs-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.3+git.279.ff9bb8a298-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 6:30:15 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]