First published: Fri Aug 22 2014(Updated: )
IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.0 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.1 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.2 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.5.0 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.5.1 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.5.5.2 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.0 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.1 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.2 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.3 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.4 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.5 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.6 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.7 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.8 | |
IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-4764 is categorized as a denial of service vulnerability.
To fix CVE-2014-4764, you should upgrade to IBM WebSphere Application Server versions 8.0.0.10 or 8.5.5.3 or later.
CVE-2014-4764 affects IBM WebSphere Application Server versions 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3.
CVE-2014-4764 can be exploited by remote attackers to cause a denial of service that results in the Load Balancer crashing.
CVE-2014-4764 was disclosed in 2014.