IBM Security Bulletin: Multiple vulnerabilities in zlib affects IBM Common Inventory Technology (CIT)

zlib compression library is vulnerable to a denial of service attack. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE(s): CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843

Affected product(s) and affected version(s):

IBM Common Inventory Technology v2.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2uQYODI
X-Force Database: http://ift.tt/2lLwOQm
X-Force Database: http://ift.tt/2mlzP6B
X-Force Database: http://ift.tt/2lLuetu
X-Force Database: http://ift.tt/2mlCjlv

The post IBM Security Bulletin: Multiple vulnerabilities in zlib affects IBM Common Inventory Technology (CIT) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2uiwUDG