Search for packages
Package details: pkg:deb/ubuntu/krb5@1.17-6ubuntu4.1
purl pkg:deb/ubuntu/krb5@1.17-6ubuntu4.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-auyb-cyjc-aaap MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit. CVE-2020-28196

Date Actor Action Vulnerability Source VulnerableCode Version