IBM Security Bulletin: Open Source OpenSSL, GNUTls, RHEL CVE-2016-8610 ‘SSL-Death-Alert’ affects IBM Cisco switches and directors.

Open Source OpenSSL is used by IBM Cisco switches and directors. IBM Cisco switches and directors has addressed the CVE.

CVE(s): CVE-2016-8610

Affected product(s) and affected version(s):

NX-OS 5.X versions prior to 5.2.8(i)

NX-OS 6.X versions prior to 6.2(19)

NX-OS 7.X versions

NX-OS 8.X versions prior to 8.1

DCNM versions prior to 10.3(1)

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2xkaBw5
X-Force Database: http://ift.tt/2hNr07D

The post IBM Security Bulletin: Open Source OpenSSL, GNUTls, RHEL CVE-2016-8610 ‘SSL-Death-Alert’ affects IBM Cisco switches and directors. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2xjNmlF