← Terug naar CVE-database
Beschrijving
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Vendors
Mit
Fedoraproject
Netapp
Oracle
Affected products
Kerberos 5
Fedora
Active Iq Unified Manager
Cloud Backup
Oncommand Insight
Oncommand Workflow Automation
Snapcenter
Communications Cloud Native Core Policy
Communications Offline Mediation Controller
Communications Pricing Design Center
Mysql Server