CVE-2024-41766

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7180203	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:-::::::
	cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:-::::::

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

21 Mar 2025, 14:14

Type	Values Removed	Values Added
CPE		cpe:2.3:o:linux:linux_kernel:-:::::::* cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:-:::::: cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:-:::::: cpe:2.3:o:microsoft:windows:-:::::::*
Summary		(es) IBM Engineering Lifecycle Optimization - Publishing 7.0.2 y 7.0.3 podría permitir que un atacante remoto provoque una denegación de servicio utilizando una expresión regular compleja.
First Time		Ibm engineering Lifecycle Optimization Publishing Ibm Microsoft windows Microsoft Linux linux Kernel Linux
References	~~() https://www.ibm.com/support/pages/node/7180203 -~~	() https://www.ibm.com/support/pages/node/7180203 - Vendor Advisory

04 Jan 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-04 15:15

Updated : 2025-03-21 14:14

NVD link : CVE-2024-41766

Mitre link : CVE-2024-41766

CVE.ORG link : CVE-2024-41766

JSON object : View

Products Affected

ibm

engineering_lifecycle_optimization_publishing

linux

linux_kernel

microsoft

windows

CWE

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2024-41766", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-01-04T15:15:06.850", "references": [{"url": "https://www.ibm.com/support/pages/node/7180203", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-1333"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression."}, {"lang": "es", "value": "IBM Engineering Lifecycle Optimization - Publishing 7.0.2 y 7.0.3 podr\u00eda permitir que un atacante remoto provoque una denegaci\u00f3n de servicio utilizando una expresi\u00f3n regular compleja."}], "lastModified": "2025-03-21T14:14:39.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE4020C9-303A-47F9-8E27-A08F9F729155"}, {"criteria": "cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B40C17B-79A1-4EF4-B46E-1E7A02E7FCAB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}