CVE-2020-28196

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-28196
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-28196.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-28196
Downstream
Related
Published
2020-11-06T08:15:13Z
Modified
2024-11-21T05:22:27Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

References

Affected packages

Git / github.com/krb5/krb5

Affected ranges

Type
GIT
Repo
https://github.com/krb5/krb5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
57415dda6cf04e73ffc3723be518eddfae599bfd

Database specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "82004413599074258995082300997859384277",
                    "95514533372883996870744119677761171591",
                    "256781595708548989705620904801224709789",
                    "278010137863133208867295668046764927658",
                    "23956022074200509683341350576803350327",
                    "190335139486536940044550308909496061835",
                    "169798344457330923474986025653426785038",
                    "32325356854271996720022701572692771778",
                    "52300159344737788490623129516453239447",
                    "186806524128379503509081764593343790184",
                    "243105010521653262774947389972205187455",
                    "63857117114616130914474771310684033647",
                    "199417454384241800826523717220571858480",
                    "30188149857417280810981412035781190927",
                    "267333555597311098053677739621321070589",
                    "150664080048655905756414456523591557682",
                    "255842828104875388391352603696648059168",
                    "305807793871677643555867443063607059033",
                    "49554595789120067555647948590810355974",
                    "304164243049172345599539357550429498714",
                    "276706774358412251743588505323921817969",
                    "319507010322596304432716532824188812522",
                    "187716112151959876914627128883343721908",
                    "171454353741844590700493061918404597125",
                    "208766693756104307864784200706611949598",
                    "308593154605976333657788096751535266174",
                    "67281110818822095509633258637472998374",
                    "301293672693294295426252448147416371342",
                    "157004517731995025953302795540372074819",
                    "232470601004856172972759924748522063383",
                    "313693152712755249157226542960713384796"
                ]
            },
            "id": "CVE-2020-28196-02fe0993",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c"
            },
            "signature_type": "Line",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 1810.0,
                "function_hash": "57529091313606092540209127447220814768"
            },
            "id": "CVE-2020-28196-16e73268",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "get_tag"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 411.0,
                "function_hash": "99529815593991416643313083110453829191"
            },
            "id": "CVE-2020-28196-4d4662e1",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "k5_asn1_full_decode"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 2735.0,
                "function_hash": "80648222733855492235361015376819548722"
            },
            "id": "CVE-2020-28196-506ea3b4",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "decode_atype"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 1035.0,
                "function_hash": "13140286987635898525301114047538986872"
            },
            "id": "CVE-2020-28196-a9330910",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "decode_sequence"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 858.0,
                "function_hash": "86798477443948831184784418331358588910"
            },
            "id": "CVE-2020-28196-cfa23556",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "decode_sequence_of"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 341.0,
                "function_hash": "41481169286020098270889005944300769622"
            },
            "id": "CVE-2020-28196-faaa6393",
            "deprecated": false,
            "target": {
                "file": "src/lib/krb5/asn.1/asn1_encode.c",
                "function": "split_der"
            },
            "signature_type": "Function",
            "source": "https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd"
        }
    ]
}