Unscored CVE-2012-2190 EUVD-2012-2184GHSA-v22f-x3qj-f766

IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x befo…

Published Aug 21, 2012 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.

References

ibm-multiple-gskit-hello-dos(75994) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21606096
PM66218 vendor-advisory