PT-2024-9572 · Ibm · Ibm Watson Speech Services Cartridge For Ibm Cloud Pak For Data

Published 2024-11-25 · Updated 2025-08-15 · CVE-2024-49353

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data versions 4.0.0 through 5.0.2

Description The issue is caused by synchronization errors when using a shared resource, potentially allowing a remote attacker to cause a denial of service. The problem arises from improper input checking to resources used concurrently, which might lead to unexpected states and possibly result in a crash.

Recommendations For versions 4.0.0 through 5.0.2, consider restricting access to concurrently used resources until a patch is available. As a temporary workaround, avoid using the resources that are used concurrently until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2024-11279

CVE-2024-49353

Affected Products

Ibm Watson Speech Services Cartridge For Ibm Cloud Pak For Data

References · 8

• https://ibm.com/support/pages/node/7177065 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49353 · Security Note
• https://bdu.fstec.ru/vul/2024-11279 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49353 · Vendor Advisory
• https://t.me/latest_high_impact_cve/1566 · Telegram Post
• https://t.me/cveNotify/132453 · Telegram Post
• https://twitter.com/CVEnew/status/1861255973660434588 · Twitter Post
• https://twitter.com/cracbot/status/1863100842691416328 · Twitter Post