IBM WebSphere Cast Iron Solution & App Connect Professional has addressed the open source vulnerabilities.
CVEID:CVE-2019-9824
**DESCRIPTION:**tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/158312 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
WebSphere Cast Iron v 7.5.0.0, 7.5.0.1, 7.5.1.0
WebSphere Cast Iron v 7.0.0.0, 7.0.0.1, 7.0.0.2
App Connect Professional v 7.5.2.0
App Connect Professional v 7.5.3.0
Product | VRMF | Remediation/First Fix |
---|---|---|
IBM Cast Iron | 7.0.0.0 | |
7.0.0.1 | ||
7.0.0.2 | 7002 Fixcentral Link | |
IBM Cast Iron | 7.5.0.0 | |
7.5.0.1 | ||
7.5.1.0 | 7510 fixcentral Link | |
App Connect Professional | 7.5.2.0 | 7520 Fixcentral link |
App Connect Professional | 7.5.3.0 | 7530 Fixcentral link |
None