Nicowilliams

**Name of the Vulnerable Software and Affected Versions** Heimdal versions prior to 7.7.1 **Description** The issue allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor. This can be achieved via a `preferred mech type` of `GSS C NO OID` and a nonzero `initial response` value to `send accept`. **Recommendations** For Heimdal versions prior to 7.7.1, update to version 7.7.1 or later to resolve the issue.