CVE-2002-0036

Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.

Scoring

CVSS base score
0.76
EPSS probability
19.01%
Published
2004-09-01
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs