IBM Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2015-7848, CVE-2015-7855)

There are multiple vulnerabilities in the Network Time Protocol (NTP) implementation embedded within the IBM Virtualization Engine TS7700.

CVE(s): CVE-2015-7848, CVE-2015-7855

Affected product(s) and affected version(s):

All versions of microcode for the IBM Virtualization Engine TS7700 (3957-V06, 3957-V07, 3957-VEA, 3957-VEB, 3957-VEC) prior to and including the following are affected:

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tSwmjM
X-Force Database: http://ift.tt/1XbCU9s
X-Force Database: http://ift.tt/1Urnny8

The post IBM Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2015-7848, CVE-2015-7855) appeared first on IBM PSIRT Blog.

Machine TypeModelVersion
3957V068.21.0.178
3957VEA8.21.0.178
3957V078.41.101.10
3957VEB8.41.101.10
3957VEC8.41.101.10


from IBM Product Security Incident Response Team http://ift.tt/2sUqJEq