Not rated
CVE-2017-1304 IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS…
Description
IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Storage Server | 5.0 | No fix stated |
| Elastic Storage Server | 4.5 | No fix stated |
| Elastic Storage Server | 4.0 | No fix stated |
| Elastic Storage Server | 3.5 | No fix stated |
| Elastic Storage Server | 3.0 | No fix stated |
| Elastic Storage Server | 2.5 | No fix stated |
| Elastic Storage Server | 2.0 | No fix stated |
Other CVEs of Elastic Storage Server
The 6 CVEs of Elastic Storage Server →
CVE-2020-5015
IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a…
7.5
High
CVE-2020-4756
IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System…
6.2
Medium
CVE-2020-4383
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a…
5.3
Medium
CVE-2020-4382
IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a…
6.2
Medium