CVE-2013-4487

Publication date 20 November 2013

Last updated 24 July 2024


Ubuntu priority

Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries. NOTE: this issue is due to an incomplete fix for CVE-2013-4466.

Read the notes from the security team

Status

Package Ubuntu Release Status
gnutls28 14.04 LTS trusty Not in release
13.10 saucy Ignored end of life
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release

Notes


mdeslaur

off by one in fix for CVE-2013-4466