Vulners
Lucene search
IBM i Access For Windows 7.1 Denial Of Service
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Security Bulletin: IBM i Access for Windows affected by vulnerabilities CVE-2015-2023 and CVE-2015-7422. | 18 Dec 201914:26 | – | ibm |
 | IBM i Access for Windows Local Denial of Service Vulnerability | 26 Nov 201500:00 | – | cnvd |
 | CVE-2015-7422 | 2 Jan 201621:00 | – | cve |
 | CVE-2015-7422 | 2 Jan 201621:00 | – | cvelist |
 | EUVD-2015-7346 | 7 Oct 202500:30 | – | euvd |
 | CVE-2015-7422 | 2 Jan 201621:59 | – | nvd |
 | IBM i Access For Windows 7.1 Denial Of Service | 19 Nov 201500:00 | – | packetstorm |
 | Buffer overflow | 2 Jan 201621:59 | – | prion |
Vendor:
==============
www.ibm.com
Product:
====================================================
IBM i Access for Windows
Release 7.1 of IBM i Access for Windows is affected
Vulnerability Type:
========================
Stack Buffer Overflow DOS
CVE Reference:
==============
CVE-2015-7422
Vulnerability Details:
=====================
IBM i Access for Windows vulnerable to a buffer overflow, caused by
improper bounds checking.
A local attacker could overflow a buffer and cause the program to crash.
Remediation/Fixes
The issue can be fixed by obtaining and applying the Service Pack SI57907.
The buffer overflow vulnerability can be remediated by applying Service
Pack SI57907.
The Service Pack is available at:
http://www-03.ibm.com/systems/power/software/i/access/windows_sp.html
Workarounds and Mitigations
None known
CVSS Base Score: 4
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/107770 for the current
score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Description:
======================================================================
Request Method(s): [+] local
Vulnerable Product: [+] IBM i Access for Windows Release 7.1
Affected Area(s): [+] IBMI i Access
# 0day.today [2017-12-31] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 Nov 2015 00:00Current
6.7Medium risk
Vulners AI Score6.7
EPSS0.00077