CVE-2017-7509

An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2018-07-26

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Certificate System (Red Hat)
• Certificate System (Redhat)

References

• http://www.securitytracker.com/id/1039248
• https://access.redhat.com/errata/RHSA-2017:2560
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509