Skip to content
OpenAdvisories
High · 7.1 CVE-2020-4411 EUVD-2020-25658GHSA-fv83-f7r2-29wc

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerabil…

Published May 19, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Description

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.

Affected products

VendorProductAffectedFixed
IBM Spectrum Scale 4.2.0.0, 5.0.0.0, 5.0.4.3, 4.2.3.21 —

References