IBM Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters (CVE-2017-3735)

A vulnerability was found in the OpenSSL release used by the Windows and z/OS Security Identity Adapters. These adapters have been upgraded to a more current OpenSSL release that corrects CVE-2017-3735 “Malformed X.509 IPAddressFamily could cause OOB read” vulnerability.

CVE(s): CVE-2017-3735

Affected product(s) and affected version(s):

IBM Security Identity Manager v6.0 Adapters for Windows and z/OS platforms

IBM Security Identity Adapters v7.x for Windows and z/OS platforms

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22014628
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047

The post IBM Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters (CVE-2017-3735) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2ufAiAa