IBM Security Bulletin: This Power System update is being released to address CVE 2018-1992

Mar 20, 2019 10:02 am EDT

Categorized: Medium Severity

Share this post:

Power9: In response to a buffer overflow vulnerability on the boot loader, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2018-1992.

CVE(s): CVE-2018-1992

Affected product(s) and affected version(s):
Firmware release FW910 is affected. P9 OpenPOWER releases OP910 and OP920 are affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10868992
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/154345

from IBM Product Security Incident Response Team https://ift.tt/2Oi8u49