Description
Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Certificate System 8 | pki-tps | 8.1.3-5.el5pki | RHSA-2013:0856 |
Advisories 1
- RHSA-2013:0856 Red Hat Security Advisory: pki-tps security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=924870
- RHSA-2013:0856 vendor-advisory
- 93613 vdb-entry
- 1029685 vdb-entry
- 60085 vdb-entry