Vulnerability Bulletins |
Security Bulletin: Vulnerability GSKit Certificate Chain Vulnerability (CVE-2013-6747) |
|
| Affected software | IBM |
|
A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop which can lead to a segv crash or hang due to memory exhaustion. CVE(s): CVE-2013-6747 and CVE-2013-4002 Affected product(s) and affected version(s): GSKit Certificate Chain 7.1.x, 7.2.x and 7.5.x Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerability_gskit_certificate_chain_vulnerability_cve_2013_6747?lang=en_us |
|