The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large number of connections to the BlackICE system that consumes more resources than intended by the user.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Blackice_agent | Iss | 3.1eal (including) | 3.1eal (including) |
| Blackice_agent | Iss | 3.1ebh (including) | 3.1ebh (including) |