CVE-2010-2328

IBM WebSphere Application Server 7.0 - Denial of Service via Chunked Gzip Data

Title source: llm
STIX 2.1

Description

The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.

References (2)

Core 2
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829
Patch vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM08894

Scores

EPSS 0.0111
EPSS Percentile 62.4%

Details

Status published
Products (6)
ibm/websphere_application_server 7.0
ibm/websphere_application_server 7.0.0.1
ibm/websphere_application_server 7.0.0.3
ibm/websphere_application_server 7.0.0.5
ibm/websphere_application_server 7.0.0.7
ibm/websphere_application_server 7.0.0.9
Published Jun 18, 2010
Tracked Since Feb 18, 2026