Lucene search

K
osvGoogleOSV:CVE-2020-28196
HistoryNov 06, 2020 - 8:15 a.m.

CVE-2020-28196

2020-11-0608:15:13
Google
osv.dev
7

0.005 Low

EPSS

Percentile

76.9%

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

References