CVEvulnerability

CVE-2013-6747

7.1 HIGH Published 2014-01-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.

Affected configurations

• ibm global security kit 8.5 • ibm global security kit 7.0 • ibm global security kit 7.0.4.28 • ibm global security kit 7.0.4.29 • ibm global security kit 8.0 • ibm global security kit 8.0.13 • ibm security directory server • ibm tivoli directory server

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References