IBM SAN Volume Controller: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• High 7.5
  CVE-2018-5732

  A specially constructed response from a malicious server can cause a buffer overflow in dhclient

  Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed …

  ISC ISC DHCP isc-dhcp isc-dhcp Debian Ubuntu Alpine
  Oct 9, 2019
• Medium 6.5
  CVE-2018-1775

  IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 …

  IBM Spectrum Virtualize Software FlashSystem V9000 SAN Volume Controller
  Feb 27, 2019
• Medium 5.9
  CVE-2018-1517

  A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflic…

  IBM SDK, Java Technology Edition
  Aug 20, 2018
• Medium 4.3
  CVE-2018-11784 Public exploit Scanner template EPSS 98%

  Apache Tomcat Open Redirect vulnerability

  When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redi…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Oct 4, 2018
• Unscored —
  CVE-2017-17449

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-17833

  OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest its…

  openslp-dfsg Ubuntu
  Apr 23, 2018
• Unscored —
  CVE-2017-18017 EPSS 53%

  The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36…

  linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  Jan 3, 2018
• Unscored —
  CVE-2018-12539

  In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an E…

  The Eclipse Foundation Eclipse OpenJ9
  Aug 14, 2018
• Unscored —
  CVE-2018-2783

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported…

  openjdk-8 openjdk-7 Ubuntu
  Apr 19, 2018

Revision history

1. 2023-02-28 #2

   Neue Updates von IBM aufgenommen

2. 2019-02-25 #1

   Initiale Fassung

References

• IBM Security Bulletin 872546 vom 2023-02-17
  http://www.ibm.com/support/pages/node/872546
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10872550
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10872546
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10872486
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10872364
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10872456
• IBM Security Bulletins vom 2019-02-25
  https://www-01.ibm.com/support/docview.wss?uid=ibm10741135