Summary
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.
Product
IBM Spectrum Protect ist eine zentralisierte Backuplösung für Systeme im Netzwerk.
Vulnerabilities 51
-
High 8.4
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…
KEV Aug 21, 2024 -
High 7.8
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…
KEV Jun 2, 2026 -
High 7.8
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…
KEV Apr 25, 2022 -
High 8.8
Improper Privilege Management in MinIO
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access polic…
-
High 7.8CVE-2022-22942 Public exploit
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to …
-
High 7.5
golang.org/x/text/language Out-of-bounds Read vulnerability
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.
-
High 7.5
x/crypto/ssh vulnerable to panic via malformed packets
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
-
High 7.5
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…
-
Medium 6.2
IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a…
-
Medium 6.0
IBM Spectrum Protect Plus Container Backup and Restore (10.1.5 through 10.1.10.2 for Kubernetes and 10.1.7 through 10.1…
-
Medium 5.9
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …
-
Medium 5.9
IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read opera…
-
Medium 5.9
An IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimit…
-
Medium 5.3
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be confi…
-
Medium 4.0
An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. Th…
-
Low 3.7
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …
-
Low 3.7
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the da…
-
Unscored —
A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SE…
-
Unscored —
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…
-
Unscored —
An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. …
-
Unscored —
An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because th…
-
Unscored —
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to…
-
Unscored —
A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in …
-
Unscored —
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functiona…
-
Unscored —
An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…
-
Unscored —
In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …
-
Unscored —
An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …
-
Unscored —
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…
-
Unscored —
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…
-
Unscored —
A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segm…
-
Unscored —
A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a de…
-
Unscored —
net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_b…
-
Unscored —
A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memo…
-
Unscored —
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local…
-
Unscored —
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers i…
-
Unscored —CVE-2021-4154 Public exploit
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…
-
Unscored —
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files wi…
-
Unscored —
An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way user…
-
Unscored —
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tr…
-
Unscored —
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found …
-
Unscored —
A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race …
-
Unscored —CVE-2021-44733 Public exploit
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs …
-
Unscored —CVE-2021-45485 Public exploit
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of…
-
Unscored —
In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash…
-
Unscored —
A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of ser…
-
Unscored —
A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.
-
Unscored —CVE-2022-1011 Public exploit
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw all…
-
Unscored —CVE-2022-24675 Public exploit
Stack overflow from a large amount of PEM data in encoding/pem
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
-
Unscored —
Panic during certificate parsing on Darwin in crypto/x509
Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.
-
Unscored —
Panic due to large inputs affecting P-256 curves in crypto/elliptic
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
Revision history
-
#5
Neue Updates von Ubuntu aufgenommen
-
#4
Neue Updates von Ubuntu aufgenommen
-
#3
Neue Updates von IBM aufgenommen
-
#2
Neue Updates von Amazon aufgenommen
-
#1
Initiale Fassung
References
-
Ubuntu Security Notice USN-6151-1 vom 2023-06-09
https://ubuntu.com/security/notices/USN-6151-1
-
Ubuntu Security Notice USN-5984-1 vom 2023-03-29
https://www.cybersecurity-help.cz/vdb/SB2023032948
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596399
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596907
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596881
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596741
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596883
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596971
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596895
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596379
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596877
-
IBM Security Advisory vom 2022-06-29
https://www.ibm.com/support/pages/node/6596875
-
Amazon Linux Security Advisory ALAS2KERNEL-5.4-2022-027 vom 2022-07-21
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-027.html
-
Amazon Linux Security Advisory ALAS2KERNEL-5.4-2022-029 vom 2022-07-21
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-029.html
-
IBM Security Bulletin 6618019 vom 2022-09-03
https://www.ibm.com/blogs/psirt/security-bulletin-information-disclosure-and-denial-of-service-vulnerabilities-in-the-ibm-spectrum-protect-backup-archive-client-may-affect-ibm-spectrum-protect-for-space-management-cve-2022-22478/