Description
An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Certificate System | pki-common-8.1.20-1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Certificate System 8 | pki-ca | 8.1.9-2.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | pki-common +1 | 8.1.20-1.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | pki-kra | 8.1.7-2.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | pki-silent | 8.1.2-3.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | pki-tps | 8.1.30-1.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | pki-util +1 | 8.1.3-2.el5pki | RHSA-2017:2560 |
| Red Hat Certificate System 8 | redhat-pki-ca-ui | 8.1.1-2.el5pki | RHSA-2017:2560 |
Advisories 1
- RHSA-2017:2560 Red Hat Security Advisory: Red Hat Certificate System 8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- RHSA-2017:2560 vendor-advisory
- 1039248 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509