OpenSSL, used by the IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage Manager for Virtual Environments): Data Protection from VMware, is vulnerable to two denial of service vulnerabilities which can cause the application to stop responding or crash.
CVE(s): CVE-2016-8610, CVE-2017-3733
Affected product(s) and affected version(s):
These security exposures affect network connections between IBM Spectrum Protect (formerly Tivoli Storage Manager) and VMware services. This exposure affects:
- IBM Spectrum Protect (formerly Tivoli Storage Manager) Client levels:
– 7.1.0.0 through 7.1.6.4
– 6.4 all levels
– 6.3 all levels (6.3 is EOS and at end of life cycle)Note that the 8.1 client is not affected because the affected component in 8.1 has been moved to Data Protection for VMware.
- IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage Manager for Virtual Environments): Data Protection for VMware levels:
– 8.1.0.0 through 8.1.0.1
– 7.1.0.0 through 7.1.6.4
– 6.4 all levels
– 6.3 all levels (6.3 is EOS and at end of life cycle)Note that for 8.1, the affected component was moved from the Client to DP for VMware.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2qF0DFo
X-Force Database: http://ift.tt/2hNr07D
X-Force Database: http://ift.tt/2p5AbPwThe post IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware appeared first on IBM PSIRT Blog.
- IBM Spectrum Protect for Virtual Environments (formerly Tivoli Storage Manager for Virtual Environments): Data Protection for VMware levels:
from IBM Product Security Incident Response Team http://ift.tt/2rosNS5
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.