Heimdal addresses multiple vulnerabilities in v7.7.1

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Heimdal has addressed bugs in Heimdal KDC. A remote intruder can use unwrap des3() to induce a buffer overflow in Heimdal GSSAPI, leading to a denial of service or remote code execution on the host machine.