IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
Impact
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
Source excerpt · ibmWhat to do
IBM strongly encourages customers to update their systems promptly.
ProductProtocolVersionFixIBM QRadar SIEMHTTP Receiver 7.5 PROTOCOL-HTTPReceiver-7.5-20260930064859.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes IBM QRadar SIEMHTTP Receiver 7.6 PROTOCOL-HTTPReceiver-7.6-20260930064911.noarch.rpm https://www.ibm.com/support/fixcentral/swg/selectFixes
These RPMs will be updated as part of QRadar Auto Update https://www.ibm.com/docs/en/qsip/7.6.0 where enabled.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
IBM · QRadar Security Information and Event Management
| Version / range | Source status |
|---|---|
| 7.4-20210823144546 through 7.5-20260930064858 (inclusive) | affected |
| 7.6-20260330053257 through 7.6-20260930064910 (inclusive) | affected |
Original source description
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.