CVEvulnerability
CVE-2012-2190
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-310
Description
IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service (daemon crash) via a crafted ClientHello message in the TLS Handshake Protocol.
Affected configurations
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 6.1.0.35
• ibm websphere application server 6.1.0.37
• ibm websphere application server 6.1.0.39
• ibm websphere application server 6.1.0.41
• ibm websphere application server 6.1.0.43
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.17
• ibm websphere application server 7.0.0.19
• ibm websphere application server 7.0.0.21
• ibm websphere application server 7.0.0.23
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
• ibm websphere application server 8.5.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM66218 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21606096 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75994 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM66218 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21606096 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75994 exchange.xforce.ibmcloud.com