vulnerability
IBM HTTP Server: CVE-2018-1427: OpenSSL Flaws Let Remote Users Deny Service and Decrypt TLS Sessions in Certain Cases
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:N/I:N/A:P) | Mar 22, 2018 | Jun 22, 2018 | Aug 7, 2018 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
Mar 22, 2018
Added
Jun 22, 2018
Modified
Aug 7, 2018
Description
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.
Solutions
ibm-http_server-apply-fix-pack-8_5_5_14ibm-http_server-apply-fix-pack-9_0_0_8ibm-http_server-apply-interim-fix-pi94222-for-8_0ibm-http_server-apply-interim-fix-pi94222-for-8_5ibm-http_server-apply-interim-fix-pi94222-for-9_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.