Name: CVE-2013-4487: Undefined Security Weakness
Creator: Rapid7
Published: 2013-11-19T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2013-4487, CWE-189, CVSS 7.5, EPSS 0.0192

Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries. NOTE: this issue is due to an incomplete fix for CVE-2013-4466.

CVSS Details

CVSS 3.1 Base Score: 7.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Suse	—	Upgrade gnutlsUpgrade libgnutlsxx28Upgrade libgnutls-openssl-develUpgrade libgnutlsxx-develUpgrade libgnutls-devel-32bitUpgrade libgnutls28-32bitUpgrade libgnutls-develUpgrade libgnutls28Upgrade libgnutls-openssl27	Dec 12, 2013	Nov 20, 2013

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence