Security Bulletin: Vulnerability in nginx affects IBM StoredIQ (CVE-2016-4450)

Summary

A denial of service vulnerability was disclosed on May 31, 2016 by nginx. Nginx is used by StoredIQ. StoredIQ has addressed the applicable CVE

Vulnerability Details

CVE-ID: CVE-2016-4450****
Description: nginx is vulnerable to a denial of service, caused by a NULL pointer dereference error in ngx_chain_to_iovec(). By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause the worker process to crash.
CVSS Base Score: 5.300
CVSS Temporal Score: https://exchange.xforce.ibmcloud.com/vulnerabilities/113746 for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Stored IQ v7.6.

Remediation/Fixes

Product

| VRMF| APAR| Remediation/First Fix
—|—|—|—
StoredIQ| 7.6| N/A| Fix is available in 7.6.0 Fix Pack 9 on_ Fix Central._

Workarounds and Mitigations

None