6.2
Medium
CVE-2020-4756 IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System…
Description
IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Storage Server 6.0 | 6.0.0 → 6.0.1.0 | No fix stated |
| Spectrum Scale 5.0 | 5.0.0.0 → 5.0.5.2 | No fix stated |
| Spectrum Scale 4.2 | 4.2.0.0 → 4.2.3.23 | No fix stated |
Other CVEs of Elastic Storage Server
The 6 CVEs of Elastic Storage Server →
CVE-2020-5015
IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a…
7.5
High
CVE-2020-4383
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a…
5.3
Medium
CVE-2020-4382
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a…
6.2
Medium
CVE-2020-4381
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a…
5.3
Medium