CVE-2013-4466

Name of the Vulnerable Software and Affected Versions GnuTLS versions 3.1.x through 3.1.14 GnuTLS versions 3.2.x through 3.2.4

Description The issue is related to a buffer overflow in the dane query tlsa function within the DANE library (libdane) of GnuTLS. This allows remote servers to cause a denial of service, resulting in memory corruption, by sending a response that contains more than four DANE entries.

Recommendations For GnuTLS versions 3.1.x through 3.1.14, update to version 3.1.15 or later. For GnuTLS versions 3.2.x through 3.2.4, update to version 3.2.5 or later.