First published: Wed Mar 27 2013(Updated: )
Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Domino | =8.5.0 | |
IBM Lotus Domino | =8.5.0.1 | |
IBM Lotus Domino | =8.5.1 | |
IBM Lotus Domino | =8.5.1.1 | |
IBM Lotus Domino | =8.5.1.2 | |
IBM Lotus Domino | =8.5.1.3 | |
IBM Lotus Domino | =8.5.1.4 | |
IBM Lotus Domino | =8.5.1.5 | |
IBM Lotus Domino | =8.5.2.0 | |
IBM Lotus Domino | =8.5.2.1 | |
IBM Lotus Domino | =8.5.2.2 | |
IBM Lotus Domino | =8.5.2.3 | |
IBM Lotus Domino | =8.5.2.4 | |
IBM Lotus Domino | =8.5.3.0 | |
IBM Lotus Domino | =8.5.3.1 | |
IBM Lotus Domino | =8.5.3.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0486 has a critical severity level due to its potential to cause denial of service by exhausting system memory.
To fix CVE-2013-0486, you should apply the latest security updates or patches provided by IBM for Lotus Domino.
CVE-2013-0486 affects IBM Lotus Domino versions 8.5.0 through 8.5.3.2.
CVE-2013-0486 can lead to significant memory consumption which may result in crashes of the HTTP server, impacting system performance.
Yes, CVE-2013-0486 can be exploited remotely through crafted GET requests, making it a concern for web-facing servers.