Local Denial of Service Vulnerability in IBM Spectrum Scale
CVE-2020-4491

4MEDIUM

Key Information:

Vendor

IBM
Status
Spectrum Scale
Vendor
CVE Published:
20 October 2020

What is CVE-2020-4491?

A denial of service vulnerability exists in IBM Spectrum Scale versions 4.2.0.0 to 4.2.3.22 and 5.0.0.0 to 5.0.5. This flaw could enable a local attacker to send a multitude of RPC requests to the mmfsd daemon, leading to service interruptions due to crashes. Remediation measures are necessary to protect the integrity and availability of the affected systems.

Affected Version(s)

Spectrum Scale 4.2.0.0

Spectrum Scale 5.0.0.0

Spectrum Scale 5.0.5

References

https://www.ibm.com/support/pages/node/6349465
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/181991
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.