Vulnerabilidades do Apache Software Foundation Apache Kerby
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apache Software Foundation Apache Kerby: 2 registro(s), com versões afetadas e correções.
CVE-2026-57915
Alta · 7.3
CWE-304 26/06/2026
Apache Kerby: Kerberos Pre-Authentication Bypass
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.
CVE-2026-57914
Média · 6.5
CWE-400 26/06/2026
Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures
By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.