CVE Intelligence

Apache Software Foundation Apache Kerby vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Apache Kerby: 2 record(s), with affected versions and fixes.

CVE-2026-57915 High · 7.3 CWE-304 Jun 26, 2026
Apache Kerby: Kerberos Pre-Authentication Bypass
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.
CVE-2026-57914 Medium · 6.5 CWE-400 Jun 26, 2026
Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures
By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.