CVE-2020-28196
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encod…
Published Nov 6, 2020 · updated Oct 14, 2026 · mit kerberos 5
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Timeline
Detection, updates, and resolution for this record.
Nov 6, 2020 · NIST NVD
Detected
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Oct 14, 2026 · NIST NVD
Updated
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Affected
- cpe fedoraproject/fedora31
- cpe mit/kerberos 5version unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/cloud backupversion unspecified
- cpe netapp/oncommand insightversion unspecified
- cpe netapp/oncommand workflow automationversion unspecified
- cpe oracle/communications cloud native core policy1.14.0
Sources
- CVE.orgCVE-2020-28196
Official CVE identifier
cve.org - NIST NVDCVE-2020-28196
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
nvd.nist.gov