Security Bulletin: Multiple vulnerabilities in openssh affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been identified in openssh that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-10011 DESCRIPTION: OpenSSH could allow a local authenticated attacker to obtain sensitive information, caused by a...

Security Bulletin: A vulnerability in strongSwan affects IBM Flex System Manager (FSM) (CVE-2017-11185)

Summary A vulnerability has been discovered in strongSwan that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-11185 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by a NULL pointer dereference in gmp plugin. By using a...

Security Bulletin: A vulnerability in libxml2 affects IBM Flex System Manager (FSM) (CVE-2016-9318)

Summary A vulnerability has been discovered in libxml2 that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2016-9318 DESCRIPTION: Libxml2 could allow a remote attacker to obtain sensitive information, caused by failure to offer a flag directly indicating...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool (CVE-2017-3735, CVE-2017-3736)

Summary Multiple vulnerabilities have been discovered in OpenSSL that was used by IBM FSM SMIA configuration tool commonly known as Network Advisor. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obta...

Security Bulletin: A vulnerability in gnutls affects IBM Flex System Manager (FSM) (CVE-2017-7869)

Summary A vulnerability has been discovered in gnutls that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-7869 DESCRIPTION: GnuTLS is vulnerable to a denial of service, caused by an integer overflow and heap-based buffer overflow in cdkpktread functi...

Security Bulletin: A vulnerability in libgcrypt affects IBM Flex System Manager (FSM) (CVE-2017-7526)

Summary A vulnerability has been discovered in libgcrypt that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-7526 DESCRIPTION: Libgcrypt could allow a remote attacker to obtain sensitive information, caused by a cache side-channel attack when using...

Security Bulletin: A vulnerability in glibc affects IBM Flex System Manager (FSM) (CVE-2017-1000366)

Summary A vulnerability has been discovered in glibc that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the system, caused by a vulnerability that allows specially...

Security Bulletin: Multiple vulnerabilities in php5 affect IBM Flex System Manager (FSM) (CVE-2017-9227, CVE-2017-9226 CVE-2017-9224)

Summary Multiple vulnerabilities have been identified in php5 that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9227 DESCRIPTION: Oniguruma is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by...

Security Bulletin: Multiple vulnerabilities in strongswan affect IBM Flex System Manager (FSM) (CVE-2017-9023, CVE-2017-9022)

Summary Multiple vulnerabilities have been identified in strongswan that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9023 DESCRIPTION: strongSwan is vulnerable to a denial of service, caused by the improper handling of CHOICE types ...

Security Bulletin: Multiple vulnerabilities in ntp affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been identified in ntp that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-6464 DESCRIPTION: NTP is vulnerable to a denial of service. A remote authenticated attacker could exploit this vulnerabili...

Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )

Summary Multiple vulnerabilities have been identified in curl that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9586 DESCRIPTION: cURL/libcurl is vulnerable to a buffer overflow, caused by improper boundary checks by the floating poi...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.6 and 1.7 that is used by FSM. These issues were disclosed as part of the IBM Java SDK updates in April 2017. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3539 DESCRIPTIO...

Security Bulletin: A vulnerability in bash affects IBM Flex System Manager (FSM) (CVE-2016-9401)

Summary A vulnerability has been discovered in bash that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2016-9401 DESCRIPTION: GNU Bash could allow a local attacker to bypass security restrictions, caused by a use-after-free error. An attacker could explo...

Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been discovered in curl that is embedded in FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2016-8615 DESCRIPTION: cURL/libcurl is vulnerable to cookie injection, caused by an error related to fgets function. By using a malicious...

Security Bulletin: Multiple vulnerabilities in ntp affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been discovered in ntp that is embedded in FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2015-5219 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending...

Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in libxml2 that is embedded in FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-4658 DESCRIPTION: The libxml2 library, as used in multiple products, could allow a remote attacker to execute arbitrary code on the...

Security Bulletin: IBM Flex System Manager (FSM) is affected by a php5 vulnerability (CVE-2016-10158)

Summary A vulnerability has been identified in php5 that is embedded in the IBM FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2016-10158 DESCRIPTION: PHP is vulnerable to a denial of service, caused by an off-by-one error in exifconvertanytoint function in...

Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple Struts vulnerabilities (CVE-2016-1181, CVE-2016-1182)

Summary Multiple vulnerabilities have been identified in Struts that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by th...

Security Bulletin: IBM Flex System Manager (FSM) is affected by tar vulnerabilities (CVE-2010-0624 CVE-2016-6321)

Summary Multiple security vulnerabilities have been identified in the tar command that is embedded in IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2010-0624 DESCRIPTION: GNU Tar and GNU Cpio are vulnerable to a heap-based buffer overflow, caused by...

Security Bulletin: IBM Flex System Manager (FSM) is affected by an OpenSSH vulnerability (CVE-2015-8325)

Summary A security vulnerability has been identified in OpenSSH that is embedded in IBM FSM. This bulletin addresses this issue. Vulnerability Details CVEID: CVE-2015-8325 DESCRIPTION: OpenSSH could allow a local attacker to gain elevated privileges on the system, caused by an error in the...