CVE-2013-1886

HIGH 7.5CVE-2013-1886 · Published 24/01/2014 · updated 16/06/2026

In short

CVE-2013-1886 is a HIGH (CVSS 7.5) vulnerability affecting certificate system (redhat), dogtag certificate system (redhat).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
certificate system redhat	`= 8.1`	No fix yet
dogtag certificate system redhat	`= 10.0= 9.0`	No fix yet

Description

Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.

References

osvdb.org/93613
rhn.redhat.com/errata/RHSA-2013-0856.html · Vendor Advisory
securityfocus.com/bid/60085
securitytracker.com/id/1029685
bugzilla.redhat.com/show_bug.cgi · Vendor Advisory

More vulnerabilities in certificate system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

certificate system

redhat

= 8.1

No fix yet

dogtag certificate system

redhat

= 10.0= 9.0

No fix yet

Description

More vulnerabilities in certificate system

See all →