Skip to content
Sign in
7.5 High

CVE-2020-4434 Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid…

Description

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a denial-of-service (DoS) through the http fallback service. IBM X-Force ID: 180900.

Affected products and versions

Product Affected versions Fixed in
Aspera Shares On Demand 3.7.4 No fix stated
Aspera Application Platform On Demand 3.7.4 No fix stated
Aspera Transfer Cluster Manager 1.3.1 No fix stated
Aspera High-Speed Transfer Server 3.9.3 No fix stated
Aspera Proxy Server 1.4.3 No fix stated
Aspera Faspex On Demand 3.7.4 No fix stated
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) 3.9.10 No fix stated
Aspera High-Speed Transfer Endpoint 3.9.3 No fix stated
Aspera Streaming 3.9.3 No fix stated
Show the other branch
Product Affected versions Fixed in
Aspera Server On Demand 3.7.4 No fix stated

Other CVEs of Aspera Shares On Demand

The 5 CVEs of Aspera Shares On Demand →
CVE-2020-4435 Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration,… 7.5 High CVE-2020-4436 Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an… 8.8 High CVE-2020-4433 Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking 7.5 High CVE-2020-4432 Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an… 7.5 High
Track this CVE