IBM Security Guardium has addressed the following vulnerability.
CVEID: CVE-2018-1000156 DESCRIPTION: GNU Patch could allow a remote attacker to execute arbitrary code on the system, caused by an input validation error when processing patch files. An attacker could exploit this vulnerability using a patch file processed via the patch utility to execute arbitrary code on the system.
CVSS Base Score: 7.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/141283> for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Affected IBM Security Guardium
|
Affected Versions
—|—
IBM Security Guardium | 10.0 - 10.5
Product
|
VRMF
|
Remediation / First Fix
—|—|—
IBM Security Guardium | 10.0 - 10.5 |
Customers can upgrade to version 10.6 by downloading from here:
Or
Customers currently on version 10.5 with patch 10.0p512 installed can upgrade version 10.5 with bundle 10.0p520 from here:
None