CVE-2022-43880: IBM QRadar WinCollect Agent

Q: What is the severity of CVE-2022-43880?

CVE-2022-43880 is classified as a denial of service vulnerability which can significantly impact the availability of the affected system.

Q: How do I fix CVE-2022-43880?

To remediate CVE-2022-43880, upgrade the IBM QRadar WinCollect Agent to version 10.1.3 or later.

Q: Who is affected by CVE-2022-43880?

CVE-2022-43880 affects users of the IBM QRadar WinCollect Agent versions 10.0 through 10.1.2.

Q: What actions can be taken to mitigate CVE-2022-43880?

To mitigate CVE-2022-43880, limit privileged access to the IBM QRadar WinCollect Agent until a patch is applied.

Q: Is there a workaround for CVE-2022-43880?

There are no known workarounds for CVE-2022-43880; the recommended solution is to upgrade to a patched version.

Published Apr 4, 2023

Updated

IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151.

Other sources

IBM QRadar WinCollect Agent could allow a privileged user to cause a denial of service.

— IBM

Affected Software

2 affected components

IBM QRadar WinCollect Agent<=10.0 - 10.1.2

IBM QRadar Wincollect>=10.0<=10.1.2

Event History

Apr 4, 2023

CVE Published

via IBM·12:00 AM

Mar 3, 2024

CVE Published

via MITRE·03:34 PM

Data Sourced

via MITRE·03:34 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6980843

Frequently Asked Questions

What is the severity of CVE-2022-43880?

CVE-2022-43880 is classified as a denial of service vulnerability which can significantly impact the availability of the affected system.

How do I fix CVE-2022-43880?

To remediate CVE-2022-43880, upgrade the IBM QRadar WinCollect Agent to version 10.1.3 or later.

Who is affected by CVE-2022-43880?