← CVE Intelligence

CVE-2026-57914

Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures PUBLISHED

Description (CNA)

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Kerbyaffected 0 before 2.1.2

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.