Security Bulletin: IBM QRadar SIEM is vulnerable to DOS attack via malicious packets. (CVE-2015-5044)

Summary QRadar Flow Collector DOS vulnerability while processing certain flows received from network Vulnerability Details CVE-ID: CVE-2015-5044 Description: IBM QRadar SIEM QFLOW component is susceptible to a DOS attack when an attacker sends certain packet types. CVSS Base Score: 4.3 CVSS...

CVE-2015-5044

The Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x before 7.2.5 Patch 4 IF3 allows remote attackers to cause a denial of service via unspecified packets...

CVE-2015-5044

IBM QRadar QFLOW Flow Collector is affected in QRadar SIEM versions 7.1.x prior to MR2 Patch 11 IF3 and 7.2.x prior to 7.2.5 Patch 4 IF3. A flaw in processing certain flows/packets can allow remote attackers to cause a denial-of-service. The vendor IBM explicitly notes this as a DOS via specific ...