Low CentOS sblim-cim-client2 Update

Metadata

low
unknown
sblim-cim-client2-2.1.3-2.el6.noarch.rpm, sblim-cim-client2-2.1.3-2.el6.src.rpm, sblim-cim-client2-javadoc-2.1.3-2.el6.noarch.rpm, sblim-cim-client2-manual-2.1.3-2.el6.noarch.rpm
rhn.redhat.com, lists.centos.org
2012-07-10
2017-07-27 20:03
2017-07-27 19:03
2017-04-01 19:06
2017-01-05 20:10

Description


Updated sblim-cim-client2 packages that fix one security issue are now
available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

The SBLIM (Standards-Based Linux Instrumentation for Manageability) CIM
(Common Information Model) Client is a class library for Java applications
that provides access to CIM servers using the CIM Operations over HTTP
protocol defined by the DMTF (Distributed Management Task Force) standards.

It was found that the Java HashMap implementation was susceptible to
predictable hash collisions. SBLIM uses HashMap when parsing XML inputs. A
specially-crafted CIM-XML message from a WBEM (Web-Based Enterprise
Management) server could cause a SBLIM client to use an excessive amount of
CPU. Randomization has been added to help avoid collisions. (CVE-2012-2328)

All users of sblim-cim-client2 are advised to upgrade to these updated
packages, which contain a backported patch to resolve this issue.
Please see https://www.redhat.com/footer/terms-of-use.html

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

Release Package Patched in
6 sblim-cim-client2 sblim-cim-client2-2.1.3-2.el6.noarch.rpm
sblim-cim-client2 sblim-cim-client2-2.1.3-2.el6.src.rpm
sblim-cim-client2-javadoc sblim-cim-client2-javadoc-2.1.3-2.el6.noarch.rpm
sblim-cim-client2-manual sblim-cim-client2-manual-2.1.3-2.el6.noarch.rpm