Boletines de Vulnerabilidades

Security Bulletin: Vulnerability GSKit Certificate Chain Vulnerability (CVE-2013-6747)
Información sobre el sistema

Software afectado	IBM
Descripción
A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop which can lead to a segv crash or hang due to memory exhaustion. CVE(s): CVE-2013-6747 and CVE-2013-4002 Affected product(s) and affected version(s): GSKit Certificate Chain 7.1.x, 7.2.x and 7.5.x IBM License Metric Tool IBM Tivoli Asset Discovery for Distributed Refer to the following reference URLs for remediation and additional vulnerability details: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerability_gskit_certificate_chain_vulnerability_cve_2013_6747?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2013-6747 ,CVE-2013-4002 ,CVE-2014-0160 ,CVE-2014-0411 and CVE-2014-0076.