Description
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
References
- ibm-gskit-cve20136747-cert-chain(89863) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- 56698 third-party-advisory
- 102556 vdb-entry
- 56699 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21662902
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- 1029687 vdb-entry