← Back

CVE-2004-0644

nvd nist
Published: Sep 28, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.

Affected (13)

Products: Mit: Kerberos 5
Mit
1 product
Kerberos 5
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Mit
Kerberos 5
Version 1.2.2
Kerberos 5
Version 1.2.3
Kerberos 5
Version 1.2.4
Kerberos 5
Version 1.2.5
Kerberos 5
Version 1.2.6
Kerberos 5
Version 1.2.7
Kerberos 5
Version 1.2.8
Kerberos 5
Version 1.3.1
Kerberos 5
Version 1.3.2
Kerberos 5
Version 1.3.3
Kerberos 5
Version 1.3.4
Kerberos 5
Version 1.3
Kerberos 5
Version 1.3 alpha1

References (26)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.