Security Bulletin: IBM QRadar SIEM is vulnerable to DOS attack via malicious packets. (CVE-2015-5044)

Summary

QRadar Flow Collector DOS vulnerability while processing certain flows received from network

Vulnerability Details

CVE-ID: CVE-2015-5044

Description: IBM QRadar SIEM QFLOW component is susceptible to a DOS attack when an attacker sends certain packet types.

CVSS Base Score: 4.3 **CVSS Temporal Score:**See https://exchange.xforce.ibmcloud.com/vulnerabilities/106936 for the current score **CVSS Environmental Score:***Undefined CVSS Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products and Versions

· IBM QRadar SIEM 7.2.n

· IBM QRadar SIEM 7.1.n

Remediation/Fixes

· IBM QRadar SIEM 7.2.5 Patch 4 Interim Fix 3

· IBM QRadar SIEM 7.1 MR2 Patch 11 Interim Fix 3

Workarounds and Mitigations

None