Lucene search

[email protected]CVE-2004-0644

HistorySep 28, 2004 - 4:00 a.m.

CVE-2004-0644

2004-09-2804:00:00

[email protected]

web.nvd.nist.gov

mit kerberos 5

krb5

asn.1

decoder library

infinite loop

denial of service

cve-2004-0644

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9 High

AI Score

Confidence

High

0.142 Low

EPSS

Percentile

95.7%

JSON

The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.

Affected configurations

NVD

Node

mitkerberos_5Match1.2.2

mitkerberos_5Match1.2.3

mitkerberos_5Match1.2.4

mitkerberos_5Match1.2.5

mitkerberos_5Match1.2.6

mitkerberos_5Match1.2.7

mitkerberos_5Match1.2.8

mitkerberos_5Match1.3

mitkerberos_5Match1.3alpha1

mitkerberos_5Match1.3.1

mitkerberos_5Match1.3.2

mitkerberos_5Match1.3.3

mitkerberos_5Match1.3.4

CPENameOperatorVersion
mit:kerberos_5mit kerberos 5eq1.2.2
mit:kerberos_5mit kerberos 5eq1.2.3
mit:kerberos_5mit kerberos 5eq1.2.4
mit:kerberos_5mit kerberos 5eq1.2.5
mit:kerberos_5mit kerberos 5eq1.2.6
mit:kerberos_5mit kerberos 5eq1.2.7
mit:kerberos_5mit kerberos 5eq1.2.8
mit:kerberos_5mit kerberos 5eq1.3
mit:kerberos_5mit kerberos 5eq1.3.1
mit:kerberos_5mit kerberos 5eq1.3.2

CPE	Name	Operator	Version
mit:kerberos_5	mit kerberos 5	eq	1.2.2
mit:kerberos_5	mit kerberos 5	eq	1.2.3
mit:kerberos_5	mit kerberos 5	eq	1.2.4
mit:kerberos_5	mit kerberos 5	eq	1.2.5
mit:kerberos_5	mit kerberos 5	eq	1.2.6
mit:kerberos_5	mit kerberos 5	eq	1.2.7
mit:kerberos_5	mit kerberos 5	eq	1.2.8
mit:kerberos_5	mit kerberos 5	eq	1.3
mit:kerberos_5	mit kerberos 5	eq	1.3.1
mit:kerberos_5	mit kerberos 5	eq	1.3.2