IBM Support

Security Bulletin: IBM QRadar SIEM 7.1 MR2, 7.2 MR2, and 7.0 MR5 uses an Apache HTTP Server which contains a denial of service vulnerability (CVE-2014-0098)

Created by Sean Peppard on
Published URL:
https://www.ibm.com/support/pages/node/516097
516097

Security Bulletin


Summary

The Apache HTTP Server used by IBM QRadar Security Information and Event Manager (SIEM) 7.1 MR2, 7.2 MR2, and 7.0 MR5 is vulnerable to denial of service.

Vulnerability Details

CVE ID:
CVE-2014-0098

DESCRIPTION:
Apache HTTP Server is vulnerable to a denial of service, caused by an error in the mod_log_config module when logging a cookie with an unassigned value. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause the service to crash.

The attack does not require local network access, authentication or specialized knowledge and techniques. An exploit would not affect the confidentiality of information and the integrity of data, but it could impact the availability of the system.

CVSS:
CVSS Base Score: 5.0
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/91879 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Affected Products and Versions

  • IBM QRadar Security Information and Event Manager (SIEM) 7.0 MR5
  • IBM QRadar Security Information and Event Manager (SIEM) 7.1 MR2
  • IBM QRadar Security Information and Event Manager (SIEM) 7.2 MR2

Remediation/Fixes

The recommended solution is to apply the fix for each named product as soon as practical. Please see below for information about the fixes available:

Workarounds and Mitigations

None

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support alerts like this.

References

Complete CVSS v2 Guide
On-line Calculator v2

Off

CVE-2014-0098
http://xforce.iss.net/xforce/xfdb/91879

Related Information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.1;7.0;7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21678398

Page Feedback