CVE-2013-6747

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-27 · updated 2026-06-17
Weakness: CWE-20

Description

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.

Affected products

IBM Global Security Kit: 8.5, 7.0, 7.0.4.28, 7.0.4.29, 8.0, 8.0.13
IBM Security Directory Server: all versions
IBM Tivoli Directory Server: all versions

References

http://osvdb.org/102556
http://secunia.com/advisories/56698
http://secunia.com/advisories/56699
http://www-01.ibm.com/support/docview.wss?uid=swg21662902
http://www-01.ibm.com/support/docview.wss?uid=swg21669554
http://www-01.ibm.com/support/docview.wss?uid=swg21676091
http://www-01.ibm.com/support/docview.wss?uid=swg21676092
http://www.securitytracker.com/id/1029687
https://exchange.xforce.ibmcloud.com/vulnerabilities/89863
http://osvdb.org/102556
http://secunia.com/advisories/56698
http://secunia.com/advisories/56699

Get alerted when CVE-2013-6747 or the next vulnerability affects your stack