Unscored CVE-2013-4466 EUVD-2013-4335GHSA-7hp3-frg2-6v54

Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows r…

Published Nov 19, 2013 · Updated Sep 16, 2024 · Assigned by redhat

Description

Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.

References

[oss-security] 20131024 Re: CVE Request: gnutls/libdane buffer overflow mailing-list
[gnutls-devel] 20131023 gnutls 3.2.5 mailing-list
http://www.gnutls.org/security.html#GNUTLS-SA-2013-3
[gnutls-devel] 20131023 gnutls 3.1.15 mailing-list