MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-admin-server" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-admin-server-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-doc" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-gss-samples" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-gss-samples-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-kdc" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-kdc-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-kdc-ldap" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-kdc-ldap-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-locales" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-multidev" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-otp" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-otp-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-pkinit" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-pkinit-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-user" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "krb5-user-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libgssapi-krb5-2" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libgssapi-krb5-2-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libgssrpc4" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libgssrpc4-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libk5crypto3" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libk5crypto3-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkadm5clnt-mit9" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkadm5clnt-mit9-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkadm5srv-mit8" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkadm5srv-mit9" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkadm5srv-mit9-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkdb5-7" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkdb5-7-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrad-dev" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrad0" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrad0-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5-3" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5-3-dbgsym" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5-dbg" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5-dev" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5support0" }, { "binary_version": "1.12+dfsg-2ubuntu5.4+esm2", "binary_name": "libkrb5support0-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-admin-server" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-admin-server-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-doc" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-gss-samples" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-gss-samples-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-k5tls" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-k5tls-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-kdc" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-kdc-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-kdc-ldap" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-kdc-ldap-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-locales" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-multidev" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-multidev-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-otp" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-otp-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-pkinit" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-pkinit-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-user" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "krb5-user-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libgssapi-krb5-2" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libgssapi-krb5-2-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libgssrpc4" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libgssrpc4-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libk5crypto3" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libk5crypto3-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkadm5clnt-mit9" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkadm5clnt-mit9-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkadm5srv-mit9" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkadm5srv-mit9-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkdb5-8" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkdb5-8-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrad-dev" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrad-dev-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrad0" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrad0-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5-3" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5-3-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5-dbg" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5-dev" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5-dev-dbgsym" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5support0" }, { "binary_version": "1.13.2+dfsg-5ubuntu2.2", "binary_name": "libkrb5support0-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-admin-server" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-admin-server-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-doc" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-gss-samples" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-gss-samples-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-k5tls" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-k5tls-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kdc" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kdc-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kdc-ldap" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kdc-ldap-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kpropd" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-kpropd-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-locales" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-multidev" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-otp" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-otp-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-pkinit" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-pkinit-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-user" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "krb5-user-dbgsym" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libgssapi-krb5-2" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libgssrpc4" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libk5crypto3" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkadm5clnt-mit11" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkadm5srv-mit11" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkdb5-9" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrad-dev" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrad0" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrb5-3" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrb5-dbg" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrb5-dev" }, { "binary_version": "1.16-2ubuntu0.2", "binary_name": "libkrb5support0" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-admin-server" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-admin-server-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-doc" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-gss-samples" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-gss-samples-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-k5tls" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-k5tls-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kdc" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kdc-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kdc-ldap" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kdc-ldap-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kpropd" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-kpropd-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-locales" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-multidev" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-otp" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-otp-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-pkinit" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-pkinit-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-user" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "krb5-user-dbgsym" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libgssapi-krb5-2" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libgssrpc4" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libk5crypto3" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkadm5clnt-mit11" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkadm5srv-mit11" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkdb5-9" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrad-dev" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrad0" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrb5-3" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrb5-dbg" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrb5-dev" }, { "binary_version": "1.17-6ubuntu4.1", "binary_name": "libkrb5support0" } ] }