Boletines de Vulnerabilidades

IBM WebSphere MQ Vulnerability: GSKit Certificate Chain Vulnerability


Información sobre el sistema

   
Software afectado IBM

Descripción

IBM WebSphere MQ Vulnerability: A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop which can lead to a segv crash or hang due to memory exhaustion. CVE(s): CVE-2013-6747 Affected product(s) and affected version(s): WebSphere MQ 7.5, including all maintenance levels WebSphere MQ 7.1, including all maintenance levels WebSphere MQ 7.0,1 including all maintenance levels Refer to the following reference URLs

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_websphere_mq_vulnerability_gskit_certificate_chain_vulnerability?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2013-6747.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-03-04

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT