CVE-2004-0644
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
Exploit likelihood
What each source reports
NVD Score used
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
CVE-2004-0644- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
CVE-2004-0644- Updated
- 2026-11-02
EUVDEUVD-2004-0643 No score
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
EUVD-2004-0643- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gh6c-7j72-v6m8 No score
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
GHSA-gh6c-7j72-v6m8- Updated
- 2026-11-02
OSV No score
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
CVE-2004-0644- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0644 No score
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
- Record
DEBIAN-CVE-2004-0644- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.3.4-3 | 1.3.4-3 |
krb5Debian:13 |
before 1.3.4-3 | 1.3.4-3 |
krb5Debian:14 |
before 1.3.4-3 | 1.3.4-3 |
krb5Debian:3.0 |
before 1.2.4-5woody6 | 1.2.4-5woody6 |
krb5Red Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-develRed Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-libsRed Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-serverRed Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-workstationRed Hat:enterprise_linux:3::as |
before 0:1.2.7-28 | 0:1.2.7-28 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-develRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-libsRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-serverRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-workstationRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5Red Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-develRed Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-libsRed Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-serverRed Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-workstationRed Hat:enterprise_linux:3::es |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5Red Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-develRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-libsRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-serverRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
krb5-workstationRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-28 | 0:1.2.7-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0644 is a medium vulnerability (CVSS 5.0) in Mit Kerberos 5, published August 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.58%, the 92nd percentile. Fixed in krb5 1.3.4-3.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000860
exchange.xforce.ibmcloud.com/vulnerabilities/17160
securityfocus.com/bid/11079
kb.cert.org/vuls/id/550464
rhn.redhat.com/errata/RHSA-2004-350.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2139
Show 25 moreShow less
trustix.net/errata/2004/0045
debian.org/security/2004/dsa-543
us-cert.gov/cas/techalerts/TA04-247A.html
gentoo.org/security/en/glsa/glsa-200409-09.xml
marc.info?l=bugtraq&m=109508872524753&w=2
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt
nvd.nist.gov/vuln/detail/CVE-2004-0644
github.com/advisories/GHSA-gh6c-7j72-v6m8
security-tracker.debian.org/tracker/CVE-2004-0644
access.redhat.com/errata/RHSA-2004:350
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_350.json
bugzilla.redhat.com/show_bug.cgi?id=1617246
cve.org/CVERecord?id=CVE-2004-0642