IBM Aspera On Demand products have addressed the following OpenSSL vulnerability.
CVEID:CVE-2018-0739
**DESCRIPTION:**OpenSSL is vulnerable to a denial of service. By sending specially crafted ASN.1 data with a recursive definition, a remote attacker could exploit this vulnerability to consume excessive stack memory.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/140847 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Product(s) | Version(s) |
---|---|
Aspera Faspex on Demand | 3.7.4 |
Aspera Shares on Demand | 3.7.4 |
Aspera Server on Demand | 3.7.4 |
Aspera Platform On Demand | 3.7.4 |
Affected Product(s) | Version(s) |
---|---|
Aspera Faspex on Demand | 3.9.6 |
Aspera Shares on Demand | 3.9.6 |
Aspera Server on Demand | 3.9.6 |
Aspera Platform On Demand | 3.9.6 |
None