Security Bulletin: Vulnerability GSKit Certificate Chain Vulnerability (CVE-2013-6747)
|
System information
|
| |
|
|
Affected software |
IBM |
Description
|
A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop which can lead to a segv crash or hang due to memory exhaustion. CVE(s): CVE-2013-6747 and CVE-2013-4002 Affected product(s) and affected version(s): GSKit Certificate Chain 7.1.x, 7.2.x and 7.5.x Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:
More info:
https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerability_gskit_certificate_chain_vulnerability_cve_2013_6747?lang=en_us |
Standar resources
|
|
Property |
Value |
|
CVE |
CVE-2013-6747 ,CVE-2013-4002 ,CVE-2014-0160 and CVE-2014-0076. |
