High WID-SEC-2024-1680 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published Jul 18, 2024 · Updated Jul 18, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

High 8.2

CVE-2024-36129

OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows unauthenticated attackers to crash the collector via excessive memory consumption. OTel Coll…

open-telemetry opentelemetry-collector opentelemetry-collector opentelemetry-collector-contrib Wolfi Go

Jun 5, 2024

Revision history

2024-07-18 #1
Initiale Fassung

References

IBM Security Bulletin vom 2024-07-18
https://www.ibm.com/support/pages/node/7160715