Security Advisory

CVE-2013-4487

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-11-19 19:00:00
Last updated 2024-09-16 21:09:04
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries. NOTE: this issue is due to an incomplete fix for CVE-2013-4466.