{"api_version":"1","generated_at":"2026-07-23T10:47:36+00:00","cve":"CVE-2013-4487","urls":{"html":"https://cve.report/CVE-2013-4487","api":"https://cve.report/api/cve/CVE-2013-4487.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-4487","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-4487"},"summary":{"title":"CVE-2013-4487","description":"Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.  NOTE: this issue is due to an incomplete fix for CVE-2013-4466.","state":"PUBLISHED","assigner":"redhat","published_at":"2013-11-20 14:12:30","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-189","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html","name":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"openSUSE-SU-2013:1714-1: moderate: update for gnutls","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc","name":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"Reorganized main loop in dane_raw_tlsa - Gitorious","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2013/10/31/4","name":"http://www.openwall.com/lists/oss-security/2013/10/31/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-security - Re: CVE Request: gnutls/libdane buffer overflow","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4487","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4487","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"gnutls","cpe6":"3.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4487","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"opensuse","cpe5":"opensuse","cpe6":"13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2013","cve_id":"4487","cve":"CVE-2013-4487","epss":"0.003370000","percentile":"0.565040000","score_date":"2026-04-29","updated_at":"2026-04-30 00:13:22"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:45:14.929Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"openSUSE-SU-2013:1714","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html"},{"name":"[oss-security] 20131031 Re: CVE Request: gnutls/libdane buffer overflow","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2013/10/31/4"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.  NOTE: this issue is due to an incomplete fix for CVE-2013-4466."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-11-19T19:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"openSUSE-SU-2013:1714","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html"},{"name":"[oss-security] 20131031 Re: CVE Request: gnutls/libdane buffer overflow","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2013/10/31/4"},{"tags":["x_refsource_CONFIRM"],"url":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2013-4487","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.  NOTE: this issue is due to an incomplete fix for CVE-2013-4466."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"openSUSE-SU-2013:1714","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2013-11/msg00064.html"},{"name":"[oss-security] 20131031 Re: CVE Request: gnutls/libdane buffer overflow","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2013/10/31/4"},{"name":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc","refsource":"CONFIRM","url":"https://gitorious.org/gnutls/gnutls/commit/0dd5529509e46b11d5c0f3f26f99294e0e5fa6dc"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2013-4487","datePublished":"2013-11-19T19:00:00.000Z","dateReserved":"2013-06-12T00:00:00.000Z","dateUpdated":"2024-09-16T21:09:04.901Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-11-20 14:12:30","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-189","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"827A375E-8045-4A81-AB7C-11A89E862518"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BEC1076D-2249-406B-9D43-B24764BBE007"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F039CD91-0FF6-4640-B981-20A3F9384A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8008DADD-DB6C-4C67-B333-0DC4C7152B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BC9E811B-4EED-4B6A-8836-5405F7F5A53D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"567E66B1-53D9-4A80-A938-2FE5C7CEB985"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D91451B0-301B-430D-9D77-00F4AE91C10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6917AC57-F49D-4EFC-920C-CCAFDF6174B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E7ACCE21-A19D-4BE5-9BED-30C5A7418719"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"344CCDAD-64EC-419C-995B-51F922AB9E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"49DB8FC4-F84A-47FD-9586-CF02761152A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A1B43AF4-E52B-46EA-81CF-D4DCAE82E7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D57BDDEB-090D-472C-9FB6-4555429860E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6CB23D13-94D2-4FAE-AB76-8574E35E02AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"D45B0F5E-B4E1-471E-8CDD-85E09837839F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F430F4C6-A738-4E02-BE76-041F71335E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"F272E2DC-7E54-4034-B7BA-30966D57CDFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"64EE97BB-D0EE-444A-96FA-D127892216F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB28F388-DE19-4C25-A838-949CA926C31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"33DCAA09-7E8C-4C3E-901F-641681AA9E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"435C588C-A478-4FB8-A47D-2605CB39C331"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:3.1.15:*:*:*:*:*:*:*","matchCriteriaId":"9EDDABF3-ECA6-433E-A7D6-8E13F0C6433B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"4487","Ordinal":"1","Title":"CVE-2013-4487","CVE":"CVE-2013-4487","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"4487","Ordinal":"1","NoteData":"Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a response with more than four DANE entries.  NOTE: this issue is due to an incomplete fix for CVE-2013-4466.","Type":"Description","Title":"CVE-2013-4487"},{"CveYear":"2013","CveId":"4487","Ordinal":"2","NoteData":"2013-11-19","Type":"Other","Title":"Published"}]}}}