High USN-4635-1 1 CVE

krb5 vulnerability

Published Nov 17, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Demi Obenour discovered that Kerberos incorrectly handled certain ASN.1.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	krb5	1.13.2+dfsg-5ubuntu2.2
Ubuntu · 18.04 LTS 18.04:LTS	krb5	1.16-2ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS	krb5	1.17-6ubuntu4.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	krb5	1.12+dfsg-2ubuntu5.4+esm2

Vulnerabilities 1

High 7.5

CVE-2020-28196

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerber…

krb5 krb5 krb5 Debian Ubuntu Alpine

Nov 6, 2020

References

report
https://ubuntu.com/security/CVE-2020-28196