IBM Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-5391)
IBM has announced a release for IBM Security Identity Governance and Intelligence (IGI) in response to security vulnerability. A vulnerability in the Linux kernel, included in IBM Security Identity Governance and Intelligence (IGI), affects the way the Linux kernel handles reassembly of fragmented IPv4 and IPv6 packets. By sending specially crafted IP fragments with random offsets, a remote attacker could exploit this vulnerability to exhaust all available CPU resources and cause a denial of service.
CVE(s): CVE-2018-5391
Affected product(s) and affected version(s):
IBM Security Identity Governance and Intelligence (IGI) 5.2.4, 5.2.4.1
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10958679
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148388
The post IBM Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-5391) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2KdSMqk