Security Bulletin: IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service (DoS)

Summary

IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service (DoS). This issue has been addressed.

Vulnerability Details

CVEID:CVE-2023-38741
**DESCRIPTION:**IBM TXSeries for Multiplatforms is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/262905 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

8.1

| Linux, AIX| Please follow the recommendations here
IBM TXSeries for Multiplatforms|

8.2

| Linux, AIX, Windows, HP| Please follow the recommendations here
IBM TXSeries for Multiplatforms|

9.1

| Linux, AIX| Please follow the recommendations here

Workarounds and Mitigations

None