IBM Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem model V840

There is a vulnerability in Mozilla Network Security Services (NSS) to which the IBM® FlashSystem™ V840 is susceptible. An exploit of this vulnerability (CVE-2017-7502) could to cause a denial of service.

CVE(s): CVE-2017-7502

Affected product(s) and affected version(s):

Storage Node
· Machine Type Models (MTMs) affected include 9846-AE1 and 9848-AE1
· Code versions affected include supported VRMFs:
o No supported VRMFs are affected
o VRMFs prior to 1.2.0.0 are not supported, but are affected

Controller Node
· MTMs affected include 9846-AC0, 9848-AC0, 9846-AC1, and 9848-AC1
· Code versions affected include supported VRMFs:
o No supported VRMFs are affected
o VRMFs 7.3.0.8 and earlier are not supported, but are affected

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zPlbeH
X-Force Database: http://ift.tt/2h8X71T

The post IBM Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem model V840 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2zOtkQh