MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kerberos_5 | Mit | * | 1.17.2 (excluding) |
| Kerberos_5 | Mit | 1.18.0 (including) | 1.18.3 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | krb5-0:1.18.2-8.el8 | * |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | RedHat | redhat-virtualization-host-0:4.4.6-20210527.3.el8_4 | * |
| Krb5 | Ubuntu | bionic | * |
| Krb5 | Ubuntu | devel | * |
| Krb5 | Ubuntu | focal | * |
| Krb5 | Ubuntu | groovy | * |
| Krb5 | Ubuntu | trusty | * |
| Krb5 | Ubuntu | trusty/esm | * |
| Krb5 | Ubuntu | xenial | * |