Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Kerby

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57914

    Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures

    By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

    Apache Software Foundation Apache Kerby org.apache.kerby:kerby-asn1 Maven