CVE-2016-9740: High severity ibm qradar security information and event manager vulnerability

Published Mar 7, 2017

Updated

IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor. IBM Reference #: 1999556.

Affected Software

9 affected components

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21999556

Event History

Mar 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9740?

CVE-2016-9740 is considered a high-severity vulnerability due to its potential to allow remote attackers to consume server resources.

What software versions are affected by CVE-2016-9740?

CVE-2016-9740 affects IBM QRadar Security Information and Event Manager versions 7.2.0 to 7.2.8.

How do I fix CVE-2016-9740?

To mitigate CVE-2016-9740, users should apply the latest security patches provided by IBM for the affected QRadar versions.

Can CVE-2016-9740 be exploited remotely?

Yes, CVE-2016-9740 can be exploited remotely, allowing attackers to send requests that consume all resources.

Is there a workaround for CVE-2016-9740 if I cannot apply a patch?

Currently, the best mitigation is to apply the available patches, as workarounds may not fully protect against the vulnerability.