Vulnerability in MIT Kerberos 5 Affects Unbounded Recursion in ASN.1 Encoded Messages
CVE-2020-28196

7.5HIGH

Key Information:

Vendor: Mit
Status: Kerberos 5
Vendor: CVE Published:; 6 November 2020

What is CVE-2020-28196?

An issue in MIT Kerberos 5 prior to version 1.17.2 and version 1.18.x before 1.18.3 leads to unbounded recursion due to improper handling of ASN.1-encoded messages. This vulnerability arises because the Berkeley Encoding Rules (BER) indefinite lengths utilized in the encoding process lack a sufficient recursion limit, potentially allowing attackers to exploit this flaw in crafted Kerberos messages, resulting in denial of service scenarios.