Description
IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Aspera | 4.2.5 | — |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/248627 vdb-entry
- https://www.ibm.com/support/pages/node/6966588 vendor-advisory