IBM Security Bulletin: Libxml2 vulnerabilities affect IBM SmartCloud Entry
IBM SmartCloud Entry is vulnerable to libxml2 vulnerabilities. A remote attacker could exploit these vulnerabilities to cause the application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
CVE(s): CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317
Affected product(s) and affected version(s):
IBM SmartCloud Entry 2.2.0 through 2.2.0.4 Appliance fix pack 5
IBM SmartCloud Entry 2.3.0 through 2.3.0.4 Appliance fix pack 5
IBM SmartCloud Entry 2.4.0 through 2.4.0.4 Appliance fix pack 5
IBM SmartCloud Entry 3.1.0 through 3.1.0.4 Appliance fix pack 19
IBM SmartCloud Entry 3.2.0 through 3.2.0.4 Appliance fix pack 19
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1Ue4Aq5
X-Force Database: http://ift.tt/1SR7ka0
X-Force Database: http://ift.tt/1UBIfoe
X-Force Database: http://ift.tt/1SR7ka6
X-Force Database: http://ift.tt/1UBIfog
X-Force Database: http://ift.tt/1SR7nTg
X-Force Database: http://ift.tt/1UBIfoi
X-Force Database: http://ift.tt/1SR7kac
X-Force Database: http://ift.tt/1SR7kae
X-Force Database: http://ift.tt/1UBIhfR
X-Force Database: http://ift.tt/1SR7nTl
from IBM Product Security Incident Response Team http://ift.tt/1OleLKr