CVE-2015-8523 Denial of service in n/a

High 7.5 Published 4 Apr 2016 Updated 6 Aug 2024

Remote attackers can crash the IBM Tivoli Storage Manager FastBack server by sending crafted packets to a TCP port.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-8523?

CVE-2015-8523 is a high-severity denial of service vulnerability in n/a, published on 4 Apr 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.

Weakness: CWE-284

Which versions are affected by CVE-2015-8523?

It affects 1 product.

Products include Ibm Tivoli Storage Manager Fastback.

How do I fix CVE-2015-8523?

No fix has been published for CVE-2015-8523 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2015-8523 being exploited?

There is no known exploitation of CVE-2015-8523 in the wild and no public exploit code.

Sources

Also known as GHSA-vw92-vx4f-w9m5.