Security Bulletin: IBM QRadar SIEM is vulnerable to a denial of service (CVE-2016-9740)

Summary

IBM QRadar SIEM does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended.

Vulnerability Details

CVEID: CVE-2016-9740**
DESCRIPTION:** IBM QRadar could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor.
CVSS Base Score: 7.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/119790&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

• IBM QRadar SIEM 7.2.n

Remediation/Fixes

• IBM QRadar/QRM/QVM/QRIF 7.2.8 Patch 4

Workarounds and Mitigations

None