PT-2017-10305 · Ibm · Ibm Qradar

Chris Shepherd + 6 · Published 2017-03-07 · Updated 2017-03-09 · CVE-2016-9740

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM QRadar version 7.2

Description The issue allows a remote attacker to consume all resources on the server due to improper restriction of the size or amount of resources requested by an actor.

Recommendations For IBM QRadar version 7.2, update to a version that properly restricts resource requests to prevent exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-9740

Affected Products

Ibm Qradar

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9740 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9740 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg21999556 · Vendor Advisory
• http://securityfocus.com/bid/96535 · Note