IBM Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2015-7848, CVE-2015-7855)

There are multiple vulnerabilities in the Network Time Protocol (NTP) implementation embedded within the IBM Virtualization Engine TS7700.

CVE(s): CVE-2015-7848, CVE-2015-7855

Affected product(s) and affected version(s):

All versions of microcode for the IBM Virtualization Engine TS7700 (3957-V06, 3957-V07, 3957-VEA, 3957-VEB, 3957-VEC) prior to and including the following are affected:

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tSwmjM
X-Force Database: http://ift.tt/1XbCU9s
X-Force Database: http://ift.tt/1Urnny8

The post IBM Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2015-7848, CVE-2015-7855) appeared first on IBM PSIRT Blog.

Machine Type	Model	Version
3957	V06	8.21.0.178
3957	VEA	8.21.0.178
3957	V07	8.41.101.10
3957	VEB	8.41.101.10
3957	VEC	8.41.101.10

from IBM Product Security Incident Response Team http://ift.tt/2sUqJEq