NVD

Id
40086  
Name
CVE-2013-4487  
Description
Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries. NOTE: this issue is due to an incomplete fix for CVE-2013-4466.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-11-20  
Modified Date
2013-11-20  
Seq
2013-4487  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203955 40086 CVE-2013-4487 openSUSE-SU-2013:1714  View
203956 40086 CVE-2013-4487 [oss-security] 20131031 Re: CVE Request: gnutls/libdane buffer overflow  View
203957 40086 CVE-2013-4487 https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23608 JVNDB-2013-005183 GnuTLS の DANE ライブラリ の dane_raw_tlsa におけるサービス運用妨害 (DoS) の脆弱性 GnuTLS の DANE ライブラリ (libdane) の dane_raw_tlsa には、一つずれエラー (Off-by-One error) により、サービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-4487 64429 CVE-2013-4487 40086 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005183.html 2013-10-29 2013-11-21 View