Security Bulletin
Summary
IBM has released the following 7.3.1 Patch 1 and 7.2.8. Patch 1 for IBM QRadar Network Packet Capture in response to CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754.
Affected Products and Versions
IBM QRadar Network Packet Capture 7.3.0 – 7.3.1
IBM QRadar Network Packet Capture 7.2.8
Remediation/Fixes
QRadar Network Packet Capture 7.3.1 Patch 1
QRadar Network Packet Capture 7.2.8 Patch 1
Workarounds and Mitigations
Please note in order to mitigate CVE-2017-5715 Spectre Variant #2, microcode will need to be updated on all appliances along with the Kernel update that is included in the QRadar Network Packet Capture Patch. Please see the links below for available microcode updates.
For Lenovo Appliance M5 Firmware using ISO/IMM, see:
Lenovo x3550 M5 and Lenovo x3650 M5
For Dell Appliances, see:
For Dell R630 and R730 appliances select your Operating System and Download Version 2.7.1 BIOS
Get Notified about Future Security Bulletins
References
Change History
30 May, 2018: First Publish
*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.
Disclaimer
Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.
Was this topic helpful?
Document Information
Modified date:
12 December 2022
UID
swg22016687