CVE-2011-1316: Medium severity ibm websphere application server feature pack for web services vulnerability
Published Mar 8, 2011
·Updated
The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.
Affected Software
139 affected components
IBM WebSphere Application Server Feature Pack for Web Services=5.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.31
IBM WebSphere Application Server Feature Pack for Web Services=3.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.7
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.10
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.14
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.6
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.5
IBM WebSphere Application Server Feature Pack for Web Services=5.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1
IBM WebSphere Application Server Feature Pack for Web Services=3.5
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.6
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.9
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.15
IBM WebSphere Application Server Feature Pack for Web Services=5.0.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.4
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.33
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.25
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.15
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.11
IBM WebSphere Application Server Feature Pack for Web Services=7.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.28
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.13
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.12
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.10
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=3.52
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.8
IBM WebSphere Application Server Feature Pack for Web Services=3.5.2
IBM WebSphere Application Server Feature Pack for Web Services=4.0.3
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.24
IBM WebSphere Application Server Feature Pack for Web Services=4.0.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.32
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.17
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9
IBM WebSphere Application Server Feature Pack for Web Services=3.0
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.2
IBM WebSphere Application Server Feature Pack for Web Services<=7.0.0.13
IBM WebSphere Application Server Feature Pack for Web Services=2.0
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.30
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.29
IBM WebSphere Application Server Feature Pack for Web Services=4.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.29
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.23
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.4
IBM WebSphere Application Server Feature Pack for Web Services=3.5.1
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.16
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=3.5.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.6
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.1
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.22
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.5
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.7
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.8
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.16
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.23
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.19
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.1
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.9
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.14
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.25
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.11
IBM WebSphere Application Server Feature Pack for Web Services=5.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0
IBM WebSphere Application Server Feature Pack for Web Services=5.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=4.0.1
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.5
IBM WebSphere Application Server Feature Pack for Web Services=5.1.1.4
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.1.13
IBM WebSphere Application Server Feature Pack for Web Services=3.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.31
IBM WebSphere Application Server Feature Pack for Web Services=6.1.3
Event History
Mar 8, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1316?
CVE-2011-1316 has a severity rating that may lead to a denial of service due to worker thread exhaustion and cannot be exploited without sending multiple UDP messages.
2
How do I fix CVE-2011-1316?
To fix CVE-2011-1316, update your IBM WebSphere Application Server to version 7.0.0.15 or later.
3
What software is affected by CVE-2011-1316?
CVE-2011-1316 affects multiple versions of IBM WebSphere Application Server, including versions 5.0.0, 6.1.x, and various iterations of 7.0 up to and including 7.0.0.14.
4
What impact does CVE-2011-1316 have on my system?
CVE-2011-1316 allows remote attackers to exhaust worker threads, potentially bringing the service to a halt.
5
Is there a workaround for CVE-2011-1316?
While the best solution is to update the software, reducing the rate of incoming UDP messages may serve as a temporary measure to mitigate the impact.