CVE-2024-27268

IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.
Configurations

No configuration.

History

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 -
References () https://www.ibm.com/support/pages/node/7145809 - () https://www.ibm.com/support/pages/node/7145809 -
References () https://www.kb.cert.org/vuls/id/421644 - () https://www.kb.cert.org/vuls/id/421644 -

16 May 2024, 01:15

Type Values Removed Values Added
CWE CWE-400 CWE-770
Summary (en) IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.3 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574. (en) IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.

04 May 2024, 14:16

Type Values Removed Values Added
Summary
  • (es) IBM WebSphere Application Server Liberty 18.0.0.2 a 24.0.0.3 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para hacer que el servidor consuma recursos de memoria. ID de IBM X-Force: 284574.
References
  • () https://www.kb.cert.org/vuls/id/421644 -

04 Apr 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-04 18:15

Updated : 2024-11-21 09:04


NVD link : CVE-2024-27268

Mitre link : CVE-2024-27268

CVE.ORG link : CVE-2024-27268


JSON object : View

Products Affected

No product.

CWE
CWE-770

Allocation of Resources Without Limits or Throttling