Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-26T11:28:26 apache-kerby: org.apache.kerby/kerby-asn1: Apache Kerby: Denial of Service via deeply nested ASN.1 structure 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-776

By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

A flaw was found in Apache Kerby. A remote attacker could send a deeply nested Abstract Syntax Notation One (ASN.1) structure to an Apache Kerby client or service, triggering a stack overflow exception. This could lead to a denial of service (DoS) condition, making the service unavailable to legitimate users.

This Moderate flaw in Apache Kerby, as used in several Red Hat products, allows a remote attacker to trigger a denial of service. By sending a specially crafted, deeply nested ASN.1 structure to a vulnerable client or service, an attacker can cause a stack overflow, leading to service unavailability. This impact is considered Moderate due to the potential for disruption of critical services. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Red Hat AMQ Clients Fix deferred kerby-asn1 Red Hat Build of Keycloak Fix deferred kerby-asn1 Red Hat Build of Keycloak Fix deferred rhbk/keycloak-rhel9 Red Hat Build of Keycloak Fix deferred rhbk-openshift-rhel9/rhbk-openshift-rhel9 Red Hat Data Grid 8 Fix deferred kerby-asn1 Red Hat Fuse 7 Fix deferred kerby-asn1 Red Hat JBoss Enterprise Application Platform Expansion Pack Fix deferred kerby-asn1 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-spark-operator-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat Single Sign-On 7 Fix deferred kerby-asn1 streams for Apache Kafka 2 Fix deferred kerby-asn1 streams for Apache Kafka 3 Fix deferred kerby-asn1 https://www.cve.org/CVERecord?id=CVE-2026-57914 https://nvd.nist.gov/vuln/detail/CVE-2026-57914 https://lists.apache.org/thread/w98h2q8wz0bq97vhz4vf55hqomcb2j1m