Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM78879236E608FC893E9368B37AB9F262049B5D56217CF5813FD892962F40ED95
HistoryMay 20, 2021 - 6:59 p.m.

Security Bulletin: A security vulnerabilitiy has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2019-17006)

2021-05-2018:59:37
www.ibm.com
11

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

62.0%

JSON

Summary

IBM Security Identity Manager Virtual Appliance (ISIM VA) has addressed the following vulnerabilitiy in various Open Source packages:

Vulnerability Details

CVEID:CVE-2019-17006
**DESCRIPTION:**Mozilla Network Security Services (NSS), as used in Mozilla Firefox is vulnerable to a heap-based buffer overflow, caused by improper bounds checking when using certain cryptographic primitives. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause a denial of service.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174125 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
ISIM VA 7.0.2

Remediation/Fixes

Affected Product(s) Version(s) Fix Availability
IBM Security Identity Manager Virtual Appliance 7.0.2 7.0.2-ISS-SIM-FP0003

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security identity managereq7.0.2

Related

nessus 38
ibm 5
osv 4
openvas 18
cve 1
ubuntucve 1
ubuntu 1
debiancve 1
prion 1
veracode 1
symantec 1
debian 3
redhatcve 1
suse 2
photon 1
redhat 13
oraclelinux 2
almalinux 1
rocky 1
ics 1
amazon 2
centos 1
nessus
nessus
Siemens RUGGEDCOM ROX II Insufficient Verification of Data Authenticity (CVE-2019-17006)
2023-09-14 00:00:00
Debian DLA-2058-1 : nss security update
2020-01-07 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : NSS vulnerability (USN-4231-1)
2020-01-09 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in nss and nspr CVE-2019-17006.
2021-09-22 23:38:15
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
2021-01-12 10:59:54
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-17006, CVE-2019-17023, CVE-2020-12403)
2021-07-08 17:59:28
osv
osv
nss - security update
2020-01-06 00:00:00
nss - security update
2020-07-17 00:00:00
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
openvas
openvas
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2021-1030)
2021-01-08 00:00:00
Ubuntu: Security Advisory (USN-4231-1)
2020-01-09 00:00:00
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2021-1011)
2021-01-08 00:00:00
cve
cve
CVE-2019-17006
2020-10-22 21:15:00
ubuntucve
ubuntucve
CVE-2019-17006
2019-12-31 00:00:00
ubuntu
ubuntu
NSS vulnerability
2020-01-08 00:00:00
debiancve
debiancve
CVE-2019-17006
2020-10-22 21:15:00
prion
prion
Buffer overflow
2020-10-22 21:15:00
veracode
veracode
Denial Of Service (DoS)
2020-08-04 02:02:53
symantec
symantec
Mozilla Network Security Services CVE-2019-17006 Heap Buffer Overflow Vulnerability
2019-12-26 00:00:00
debian
debian
[SECURITY] [DLA 2058-1] nss security update
2020-01-06 23:25:44
[SECURITY] [DSA 4726-1] nss security update
2020-07-17 18:06:14
[SECURITY] [DLA 2388-1] nss security update
2020-09-29 19:15:28
redhatcve
redhatcve
CVE-2019-17006
2019-12-26 06:08:47
suse
suse
Security update for mozilla-nspr, mozilla-nss (important)
2020-06-24 00:00:00
Security update for mozilla-nspr, mozilla-nss (moderate)
2020-01-12 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0474
2022-10-21 00:00:00
redhat
redhat
(RHSA-2021:1026) Moderate: nss-softokn security update
2021-03-30 07:24:03
(RHSA-2021:0758) Moderate: nss-softokn security update
2021-03-09 08:47:28
(RHSA-2021:0876) Moderate: nss and nss-softokn security update
2021-03-16 13:07:08
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2020-08-04 00:00:00
nss and nspr security, bug fix, and enhancement update
2020-10-08 00:00:00
almalinux
almalinux
Moderate: nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
rocky
rocky
nss and nspr security, bug fix, and enhancement update
2020-08-03 12:45:28
ics
ics
Siemens RUGGEDCOM ROX II
2021-02-09 12:00:00
amazon
amazon
Medium: nspr, nss-softokn, nss-util
2021-07-08 18:41:00
Medium: nspr, nss-softokn, nss-util, nss
2020-11-09 21:02:00
centos
centos
nspr, nss security update
2020-11-06 22:01:52

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

62.0%

JSON
Related for 78879236E608FC893E9368B37AB9F262049B5D56217CF5813FD892962F40ED95
nessus38ibm5osv4openvas18cve1ubuntucve1ubuntu1debiancve1prion1veracode1symantec1debian3redhatcve1suse2photon1redhat13oraclelinux2almalinux1rocky1ics1amazon2centos1