CVE-2026-57914

Medium

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can…

[email protected]·CWE-400·Published 2026-06-26

CVSS

6.5

EPSS

0.00

KEV

Exploits

Vendor statements (1)

lists.apache.org

cve.orgen

248 chars

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

GHSAen

248 chars

NVDes

301 chars

Al enviar una estructura ASN1 profundamente anidada a un cliente o servicio de Apache Kerby, es posible desencadenar una excepción de desbordamiento de pila que puede provocar problemas de denegación de servicio. Se recomienda a los usuarios actualizar a la versión 2.1.2, que soluciona este problema.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	ENISA EUVD	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H