CVE-2017-7509

Low

Description

An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.

SeverityLow

CVSS3.5

Exploit probability—

Product

Redhat Certificate System

PublishedJul 26, 2018

First seenJul 26, 2018

Weakness typeCWE-20Improper input validation

How to fix

Update

redhat certificate_system8.1.20-1 or later

Vendor advisories

access.redhat.com/errata/RHSA-2017:2560

Affected products

Product	Affected versions	Fixed in
redhat certificate_system	v < 8.1.20-1	8.1.20-1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.