IBM : Security Vulnerabilities, CVEs, Published In January 2014 (Denial of service)
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
Max CVSS
7.1
EPSS Score
4.16%
Published
2014-01-27
Updated
2017-08-29
IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service (resource consumption) via a crafted request to a web services endpoint.
Max CVSS
4.3
EPSS Score
0.68%
Published
2014-01-16
Updated
2017-08-29
The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operating System) does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Max CVSS
8.5
EPSS Score
0.55%
Published
2014-01-02
Updated
2014-01-28
3 vulnerabilities found