7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
67.9%
There is a vulnerability in the zlib library used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable issue.
CVEID:CVE-2018-25032
**DESCRIPTION:**Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By using many distant matches, a remote attacker could exploit this vulnerability to cause the application to crash.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/222615 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Product(s) | Version(s) |
---|---|
IBM Sterling Connect:Direct for Microsoft Windows | 4.8.0.0 - 4.8.0.3_iFix043 |
IBM Sterling Connect Direct for Microsoft Windows | 6.0.0.0 - 6.0.0.4_iFix050 |
IBM Sterling Connect:Direct for Microsoft Windows | 6.1.0.0 - 6.1.0.2_iFix041 |
IBM Sterling Connect:Direct for Microsoft Windows | 6.2.0.0 - 6.2.0.4_iFix003 |
IBM recommends addressing the possible vulnerability now by upgrading.
Product(s) | Version(s) | APAR | Remediation / Fix |
---|---|---|---|
IBM Sterling Connect:Direct for Microsoft Windows |
4.8
| IT40963| Apply 4.8.0.3_iFix044, available on Fix Central
IBM Sterling Connect:Direct for Microsoft Windows|
6.0
| IT40963| Apply 6.0.0.4_iFix051, available on Fix Central
IBM Sterling Connect:Direct for Microsoft Windows|
6.1
| IT40963| Apply 6.1.0.2_iFix042, available on Fix Central
IBM Sterling Connect:Direct for Microsoft Windows|
6.2
| IT40963| Apply 6.2.0.3_iFix004, available on Fix Central
For unsupported versions IBM recommends upgrading to a fixed, supported version of the product.
None
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
67.9%