CVE-2013-6747 IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (applica...
HighCVSS 7.1
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm global security kit | = 8.5 | No fix listed |
| ibm global security kit | = 7.0 | No fix listed |
| ibm global security kit | = 7.0.4.28 | No fix listed |
| ibm global security kit | = 7.0.4.29 | No fix listed |
| ibm global security kit | = 8.0 | No fix listed |
| ibm global security kit | = 8.0.13 | No fix listed |
| ibm security directory server | All versions | No fix listed |
| ibm tivoli directory server | All versions | No fix listed |
References
- 102556 vdb-entry
- 56698 third-party-advisory
- 56699 third-party-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- 1029687 vdb-entry
- ibm-gskit-cve20136747-cert-chain(89863) vdb-entry