Medium severity6.5NVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026
CVE-2026-57914
CVE-2026-57914
Description
By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-x6vc-x4v4-hjhrghsaADVISORY
- www.openwall.com/lists/oss-security/2026/06/26/7nvd
- github.com/apache/directory-kerby/commit/0bcd73eb9eb54622b84539b5fc23066057c6b5e8ghsa
- github.com/apache/directory-kerby/releases/tag/kerby-all-2.1.2ghsa
- lists.apache.org/thread/w98h2q8wz0bq97vhz4vf55hqomcb2j1mnvd
- nvd.nist.gov/vuln/detail/CVE-2026-57914ghsa
News mentions
1- Apache Software Foundation: 21 Vulnerabilities Across Multiple Products Disclosed in Early July 2026Vypr Intelligence · Jul 3, 2026