CVE-2012-4555

The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors.

Score

CVSS 2.0 4.0 Medium

Status

Modified - secalert@redhat.com

Published

2013-01-04

Last modified

2024-08-06

Affected products

• Certificate System (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2012-1550.html
• http://secunia.com/advisories/51482
• http://www.securityfocus.com/bid/56843
• http://www.securitytracker.com/id?1027846
• https://bugzilla.redhat.com/show_bug.cgi?id=869570