Boletines de Vulnerabilidades

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Networking Switches (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792)


Información sobre el sistema

   
Software afectado IBM

Descripción

The following OpenSSL vulnerabilities are addressed by the IBM Flex System Networking Switches listed below. CVE(s): CVE-2015-1788, CVE-2015-1789 and CVE-2015-1792 Affected product(s) and affected version(s): Product Affected Version Fix Version IBM Flex System Fabric EN4093R 10Gb Scalable Switch (ibm_fw_scsw_en4093r-7.8.12.0) 7.8.11.0 7.8.12.0 IBM Flex System Fabric CN4093 10Gb Converged Scalable Switch (ibm_fw_scsw_cn4093-7.8.12.0) 7.8.11.0 7.8.12.0 IBM Flex System

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_vulnerabilities_in_openssl_affect_ibm_flex_system_networking_switches_cve_2015_1788_cve_2015_1789_cve_2015_1792?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-1788 ,CVE-2015-1789 ,CVE-2015-1792 ,CVE-2014-8176 ,CVE-2015-1790 ,CVE-2015-1791 ,CVE-2015-4000 ,CVE-2015-2017 ,CVE-2015-1993 and CVE-2015-1994.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-11-05

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT