5 matches found
Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to a stack exhaustion flaw (CVE-2023-3341)
Summary IBM i Domain Name System DNS uses ISC BIND. ISC BIND on IBM i is vulnerable to a denial of service attack due to a stack exhaustion flaw as seen in the vulnerability details section. IBM i has addressed the vulnerability in ISC BIND with a fix as described in the remediation/fixes section...
Security Bulletin: IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Directory Server for i (CVE-2023-40378).
Summary IBM i is vulnerable to a local privilege escalation due to a flaw in IBM Directory Server for i as described in the vulnerability details section. IBM Directory Server for i has addressed the vulnerability with a fix as described in the remediation/fixes section. Vulnerability Details...
Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to denial of service, availability, integrity, and confidentiality impacts due to multiple vulnerabilities.
Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to denial of service, availability, integrity, and confidentiality impacts as described in the vulnerability details section CVE-2022-21426, CVE-2023-2597, CVE-2023-21830, CVE-2023-21843,...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM i
Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3193 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM i (CVE-2016-2177 and CVE-2016-2178)
Summary OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2177 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in codebase. An attacker could exploit this vulnerability...