IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.

Summary

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

Remediation

1. Inventory every IBM Watson Speech Services Cartridge deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Patchhttps://www.ibm.com/support/pages/node/7293511