CVE-2016-2960

LOW

IBM WebSphere Application Server DoS via Crafted SIP Messages

Title source: llm

Description

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages.

References (4)

Core 4

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21984796

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92354

Broken Link vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1PI61548

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1036514

Scores

CVSS v3 3.7

EPSS 0.3958

EPSS Percentile 98.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-284

Status published

Products (50)

ibm/websphere_application_server 7.0

ibm/websphere_application_server 7.0.0.0

ibm/websphere_application_server 7.0.0.1

ibm/websphere_application_server 7.0.0.2

ibm/websphere_application_server 7.0.0.3

ibm/websphere_application_server 7.0.0.4

ibm/websphere_application_server 7.0.0.5

ibm/websphere_application_server 7.0.0.6

ibm/websphere_application_server 7.0.0.7

ibm/websphere_application_server 7.0.0.8

... and 40 more

Published Aug 08, 2016

Tracked Since Feb 18, 2026