| Package | Affected versions | Patched versions |
|---|---|---|
| kerberos 5 | ≥ 1.18.0, < 1.18.3< 1.17.2 | 1.18.31.17.2 |
| communications cloud native core policy | = 1.14.0 | |
| communications offline mediation controller | = 12.0.0.3.0 | |
| communications pricing design center | = 12.0.0.3.0 | |
| mysql server | ≤ 8.0.23 |
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free