Security Bulletin: IBM b-type Network/Storage switches are affected by an Open Source OpenSSL, GNUTls, RHEL 'SSL-Death-Alert' vulnerability

Summary

IBM b-type Network/Storage switches has addressed the following CVE-2016-8610 vulnerability .

Vulnerability Details

CVEID:CVE-2016-8610**
DESCRIPTION: *SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL handshake. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause the application to stop responding.
CVSS Base Score: 7.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/118296 for the current score
CVSS Environmental Score: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected IBM b-type Network/Storage switches

| Affected Versions
—|—
IBM Network Advisor| Versions Prior to 14.0.2

Remediation/Fixes

Product

|

VRMF

|

** Fix**

—|—|—
IBM Network Advisor| 14.0.2| <http://www-01.ibm.com/support/docview.wss?uid=ssg1S7005391&gt;

Workarounds and Mitigations

None