Veille CVE

Recherche « Apache Software Foundation Apache Kerby »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache Software Foundation Apache Kerby » ✕
  1. CVE-2026-57915 7.3 Élevée

    Apache Software Foundation Apache Kerby · Red Hat AMQ Clients · Red Hat Data Grid 8 · Red Hat Fuse 7

    It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

  2. CVE-2026-57914 6.5 Moyenne

    Apache Software Foundation Apache Kerby

    By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.