CVE-2016-8919: High severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability

Published Feb 1, 2017

Updated

IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.

Affected Software

4 affected components

IBM WebSphere Application Server Feature Pack for Web Services=7.0

IBM WebSphere Application Server Feature Pack for Web Services=8.0

IBM WebSphere Application Server Feature Pack for Web Services=8.5.5

IBM WebSphere Application Server Feature Pack for Web Services=9.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21993797

Event History

Feb 1, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8919?

CVE-2016-8919 is classified as a denial of service vulnerability that can severely affect the availability of the IBM WebSphere Application Server.

How do I fix CVE-2016-8919?

To fix CVE-2016-8919, you should upgrade your IBM WebSphere Application Server to a patched version provided by IBM.

What versions of IBM WebSphere Application Server are affected by CVE-2016-8919?

CVE-2016-8919 affects IBM WebSphere Application Server versions 7.0, 8.0, 8.5.5, and 9.0.

What causes the vulnerability CVE-2016-8919?

CVE-2016-8919 is caused by the processing of serialized objects from untrusted sources, leading to resource consumption.

Can CVE-2016-8919 be exploited remotely?

Yes, CVE-2016-8919 can potentially be exploited remotely, leading to a denial of service condition.