{"id":"CVE-2020-28196","aliases":["ALPINE-CVE-2020-28196","BELL-CVE-2020-28196","DEBIAN-CVE-2020-28196","DLA-2437-1","DSA-4795-1","EUVD-2020-20680","GHSA-2wgw-3mv7-47xf","MGASA-2021-0022","OESA-2021-1026","RHSA-2021:1593","RHSA-2021:2239","RLSA-2021:1593","SUSE-SU-2020:3375-1","SUSE-SU-2020:3377-1","SUSE-SU-2020:3379-1","UBUNTU-CVE-2020-28196","USN-4635-1","openSUSE-SU-2020:2037-1","openSUSE-SU-2020:2062-1","openSUSE-SU-2024:11549-1"],"status":"published","title":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04245,"percentile":0.91116,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2020-11-06T07:07:38Z","modified":"2026-10-26T12:02:31Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"krb5","fixed_in":["1.17.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"krb5","fixed_in":["1.17.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"krb5","fixed_in":["1.18.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"krb5","fixed_in":["1.15.5-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.18.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.18.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.18.3-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"krb5","fixed_in":["1.15-1+deb9u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"krb5","fixed_in":["1.17-3+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"krb5","fixed_in":["1.17-2.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"krb5","fixed_in":["1.18.2-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"krb5","fixed_in":["1.18.2-2.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debugsource","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5-debuginfo","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"krb5","fixed_in":["0:1.18.2-8.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"krb5","fixed_in":["1.15.2-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"krb5","fixed_in":["1.15.2-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"krb5","fixed_in":["1.15.2-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"krb5","fixed_in":["1.15.2-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"krb5","fixed_in":["1.16.3-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"krb5","fixed_in":["1.16.3-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"krb5","fixed_in":["1.16.3-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"krb5","fixed_in":["1.16.3-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"krb5","fixed_in":["1.12.5-40.40.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"krb5","fixed_in":["1.12+dfsg-2ubuntu5.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"krb5","fixed_in":["1.13.2+dfsg-5ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"krb5","fixed_in":["1.16-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"krb5","fixed_in":["1.17-6ubuntu4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"krb5","fixed_in":["1.16.3-lp151.2.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"krb5-mini","fixed_in":["1.16.3-lp151.2.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"krb5","fixed_in":["1.16.3-lp152.5.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"krb5-mini","fixed_in":["1.16.3-lp152.5.13.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-1+deb9u2"}]}],"versions":["1.15-1","1.15-1+deb9u1"]},{"source":"osv","ecosystem":"Debian:10","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u1"}]}],"versions":["1.17-3"]},{"source":"osv","ecosystem":"Mageia:7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-2.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.6-20210527.3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.6-20210527.3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-8.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-40.40.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.4+esm2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1","1.12+dfsg-2ubuntu5.2","1.12+dfsg-2ubuntu5.3","1.12+dfsg-2ubuntu5.4","1.12+dfsg-2ubuntu5.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-5ubuntu2.2"}]}],"versions":["1.13.2+dfsg-2","1.13.2+dfsg-3","1.13.2+dfsg-4","1.13.2+dfsg-5","1.13.2+dfsg-5ubuntu1","1.13.2+dfsg-5ubuntu2","1.13.2+dfsg-5ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.2"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.1"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12+dfsg-2ubuntu5.4+esm2"}]}],"versions":["1.10.1+dfsg-6.1ubuntu1","1.11.3+dfsg-3ubuntu2","1.12+dfsg-2ubuntu1","1.12+dfsg-2ubuntu2","1.12+dfsg-2ubuntu3","1.12+dfsg-2ubuntu4","1.12+dfsg-2ubuntu4.2","1.12+dfsg-2ubuntu5","1.12+dfsg-2ubuntu5.1","1.12+dfsg-2ubuntu5.2","1.12+dfsg-2ubuntu5.3","1.12+dfsg-2ubuntu5.4","1.12+dfsg-2ubuntu5.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2+dfsg-5ubuntu2.2"}]}],"versions":["1.13.2+dfsg-2","1.13.2+dfsg-3","1.13.2+dfsg-4","1.13.2+dfsg-5","1.13.2+dfsg-5ubuntu1","1.13.2+dfsg-5ubuntu2","1.13.2+dfsg-5ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.2"}]}],"versions":["1.15.1-2","1.16-2","1.16-2build1","1.16-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6ubuntu4.1"}]}],"versions":["1.17-6","1.17-6ubuntu3","1.17-6ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp151.2.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"krb5-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp151.2.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp152.5.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"krb5-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-lp152.5.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-3.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mit","product":"kerberos_5"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"oracle","product":"communications_cloud_native_core_policy"},{"vendor":"oracle","product":"communications_offline_mediation_controller"},{"vendor":"oracle","product":"communications_pricing_design_center"},{"vendor":"oracle","product":"mysql_server"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202011-17","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2020/dsa-4795","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28196","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002"},{"url":"https://security.netapp.com/advisory/ntap-20201202-0001"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7"},{"url":"https://github.com/advisories/GHSA-2wgw-3mv7-47xf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-28196","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-28196","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-28196","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0022.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-28196","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1026","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1593","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1835713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901041","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1593.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28196","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2239","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1909888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1938925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1949431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957604","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2239.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25659","tags":["advisory"]},{"url":"https://cryptography.io/en/latest/changelog.html#v3-2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36242","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36242","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36242","tags":["advisory"]},{"url":"https://cryptography.io/en/latest/changelog.html#v3-3-2","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1593","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203375-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178512","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28196","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203377-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203379-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-28196","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4635-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2CMUQ7G43OCIKDTP2ILYUJLUD37RPPA3/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O6PZTATZYCUQYKCJ6QBS7JJHNWPXIDNL/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20217","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T07:07:38Z","modified":"2026-10-14T09:40:02.342Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-20680","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T07:07:38Z","modified":"2026-10-14T09:40:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-2wgw-3mv7-47xf","title":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2022-05-24T17:33:20Z","modified":"2026-10-14T12:31:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:13:24.188405Z"}],"nvd":[{"id":"CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T08:15:13.86Z","modified":"2026-10-14T10:17:34.147Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:06:21.80969Z"}],"osv":[{"id":"ALPINE-CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T08:15:13.86Z","modified":"2026-10-26T11:17:55.165379379Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-28196","title":"CVE-2020-28196 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:28.416002Z","modified":"2026-01-26T09:46:13.131374Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T08:15:13.86Z","modified":"2026-10-24T19:11:42.425898688Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T08:15:13.86Z","modified":"2026-10-26T12:02:31.194025924Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"OESA-2021-1026","title":"krb5 security update","description":"Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.\\r\\n\\r\\n\r\nSecurity Fix(es):\\r\\n\\r\\n\r\nMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.(CVE-2020-28196)\\r\\n\\r\\n","status":"published","published":"2021-02-05T11:04:15Z","modified":"2026-08-18T01:15:04.633095329Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1593","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2024-09-16T04:54:40Z","modified":"2026-08-04T10:03:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2239","title":"Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]","status":"published","published":"2024-09-16T04:54:48Z","modified":"2026-08-04T10:03:50Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1593","title":"Moderate: krb5 security update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).\n\nSecurity Fix(es):\n\n* krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS (CVE-2020-28196)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:36:22Z","modified":"2026-02-04T07:46:28.933863Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.","status":"published","published":"2020-11-06T08:15:00Z","modified":"2026-04-22T12:36:21.723003Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-2437-1","title":"krb5 - security update","status":"published","published":"2020-11-07T00:00:00Z","modified":"2026-03-09T01:19:51.201482Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4795-1","title":"krb5 - security update","status":"published","published":"2020-11-21T00:00:00Z","modified":"2026-03-09T02:10:13.632217Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0022","title":"Updated krb5 packages fix a security vulnerability","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 allows unbounded recursion via an\nASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support\nfor BER indefinite lengths lacks a recursion limit (CVE-2020-28196).\n","status":"published","published":"2021-01-14T15:13:25Z","modified":"2026-04-16T04:43:35.746472565Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:2037-1","title":"Security update for krb5","description":"This update for krb5 fixes the following security issue:\n\n- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-11-26T15:27:58Z","modified":"2026-02-04T02:54:07.611585Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2062-1","title":"Security update for krb5","description":"This update for krb5 fixes the following security issue:\n\n- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-11-27T05:23:42Z","modified":"2026-02-04T04:11:28.611319Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11549-1","title":"krb5-1.19.2-3.1 on GA media","description":"These are all security issues fixed in the krb5-1.19.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:19:01.194111Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:3375-1","title":"Security update for krb5","description":"This update for krb5 fixes the following security issue:\n\n- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).\n","status":"published","published":"2020-11-19T08:28:34Z","modified":"2026-02-04T03:54:11.82543Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3377-1","title":"Security update for krb5","description":"This update for krb5 fixes the following security issue:\n\n- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).\n","status":"published","published":"2020-11-19T08:29:53Z","modified":"2026-02-04T03:48:35.175678Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3379-1","title":"Security update for krb5","description":"This update for krb5 fixes the following security issue:\n\n- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).\n","status":"published","published":"2020-11-19T08:30:55Z","modified":"2026-02-04T04:18:50.581721Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4635-1","title":"krb5 vulnerability","description":"Demi Obenour discovered that Kerberos incorrectly handled certain ASN.1.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2020-11-17T13:35:56Z","modified":"2026-04-22T10:09:19.027628Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}