Vulnerability Intelligence Report

CVE-2022-44640

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

No Active Exploit Signals

CVSS Base Score

9.8

CRITICAL

Exploitability:3.9

Impact Score:5.9

EPSS Probability:1.84%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

CWE-415 ↗CWE-415 Double Free

Affected Products & Versions

Vendor	Product	Affected Versions
heimdal_project	heimdal	all
samba	samba	all

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗

No reference links found.

Threat Intelligence Signals

EPSS Score

1.844%

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	MITRE Corporation · N/A · USA
Reserved	2022-11-03T00:00:00
Published	2022-12-25T00:00:00
Last Updated	2025-04-15T13:20:13

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2022-44640

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2022-44640

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE