CVE-2014-0964: High severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
Published May 16, 2014
·Updated
IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Affected Software
58 affected components
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.23
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.25
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.29
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.31
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.33
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.35
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.37
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.39
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.41
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.43
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.45
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.47
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.1
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.2
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.3
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.4
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.5
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.6
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.7
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.9
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.11
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.13
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.15
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.17
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.19
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.22
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.23
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.24
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.25
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.27
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.28
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.29
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.30
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.31
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.32
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.33
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.35
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.37
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.39
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.41
IBM WebSphere Application Server Feature Pack for Web Services=6.0.2.43
Event History
May 16, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:12 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0964?
CVE-2014-0964 is classified as a denial of service vulnerability affecting IBM WebSphere Application Server.
2
How do I fix CVE-2014-0964?
To mitigate CVE-2014-0964, it is recommended to upgrade to a non-vulnerable version of IBM WebSphere Application Server.
3
Which versions of IBM WebSphere Application Server are affected by CVE-2014-0964?
CVE-2014-0964 affects IBM WebSphere Application Server versions 6.1.0.0 to 6.1.0.47 and 6.0.2.0 to 6.0.2.43.
4
What type of attack does CVE-2014-0964 allow?
CVE-2014-0964 allows remote attackers to cause a denial of service via crafted TLS traffic.
5
Is there a known tool to demonstrate CVE-2014-0964?
Yes, traffic from a CVE-2014-0160 vulnerability-assessment tool can demonstrate the vulnerability of CVE-2014-0964.