PT-2020-6887 · Mit+10 · Mit Kerberos 5+9
Published
2020-11-06
·
Updated
2025-12-03
·
CVE-2020-28196
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
MIT Kerberos 5 versions 1.17.2 and earlier, 1.18.x versions prior to 1.18.3
MySQL Server version 8.0.23 and earlier
Description
The issue is related to unbounded recursion via an ASN.1-encoded Kerberos message due to the lack of a recursion limit in the support for BER indefinite lengths in the lib/krb5/asn.1/asn1 encode.c file. This can lead to a denial of service. The vulnerability can be exploited by a remote attacker, potentially causing the system to hang or crash repeatedly.
Recommendations
For MIT Kerberos 5 versions 1.17.2 and earlier, update to version 1.17.2 or later.
For MIT Kerberos 5 versions 1.18.x prior to 1.18.3, update to version 1.18.3 or later.
For MySQL Server version 8.0.23 and earlier, update to a version later than 8.0.23.
As a temporary workaround, consider restricting access to the Kerberos authentication mechanism until a patch is available.
Fix
DoS
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Centos
Linuxmint
Mit Kerberos 5
Mysql Server
Red Hat
Rocky Linux
Suse
Ubuntu