Security Bulletin: A Remote Vulnerability Affects IBM Sterling Connect:Direct for Microsoft Windows (CVE-2020-4767)

Summary IBM Sterling Connect:Direct for Microsoft Windows could allow a remote attacker to cause a denial of service, caused by a buffer over-read. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-4767 DESCRIPTION: IBM...

CVE-2020-4767

CVE-2020-4767 affects IBM Sterling Connect Direct for Windows (versions 4.7, 4.8, 6.0, 6.1). A remote attacker can cause a denial-of-service via a buffer over-read by sending a crafted request, crashing the app. IBM provides fixes: 4.7.0.7_iFix018, 4.8.0.3_iFix024, 6.0.0.4_iFix021, 6.1.0.1_iFix00...