CVE:CVE-2020-28196
CNNVD:CNNVD-202011-670
MIT Kerberos是美国麻省理工（MIT）的一个用于在网络集群中进行身份验证的软件。Kerberos 同时作为一种网络认证协议，其设计目标是通过密钥系统为客户机 / 服务器应用程序提供强大的认证服务。
MIT Kerberos 5 (aka krb5) 1.17.2版本，1.18.x系列1.18.3之前版本存在代码问题漏洞，该漏洞源于lib/krb5/asn.1/asn1_encode.c对BER不定长度的支持没有递归限制。
solution:Upgrade mit kerberos_5 to a higher version than 1.17.2,1.18.3,and avoid the version (,1.17.2),[1.18.0,1.18.3); Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle mysql_server to a higher version than 8.0.23,and avoid the version (,8.0.23]