Impact

This is a denial of service vulnerability in Heimdal's PKI certificate validation library, affecting the KDC (via PKINIT) and kinit (via PKINIT), as well as any third-party applications using Heimdal's libhx509.

Patches

Users should upgrade to Heimdal 7.7.1 or 7.8.

For more information

If you have any questions or comments about this advisory:

• Open an issue in Heimdal
• Email us at heimdal-security@heimdal.team