Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < publication |