Package: heimdal-kcm Version: 7.8.git20221117.28daf24+dfsg-2 Control: found -1 7.7.0+dfsg-2+deb11u3
In kcm/cache.c in kcm_ccache_alloc(), slot->kdc_offset is not initialized. The means that kcm will return an uninitialized values for GET_KDC_OFFSET (the value will often be 0, but sometimes some random value) unless SET_KDC_OFFSET has been called for the cache before.
This has been fixed upstream on the master branch, but not on heimdal-7-1-branch:
https://github.com/heimdal/heimdal/pull/390 https://github.com/heimdal/heimdal/commit/9f58896af958ae5e6e3ebde8c48dad4eda841986