CVE-2020-4411

State
Published
Severity
7.1 High
Published
May 19, 2020
Updated
Sep 17, 2024
Reserved
Dec 30, 2019

Read the record on cve.org

Description

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.

Scores

CVSSScoreVectorSource
3.07.1 HighCVSS:3.0/AC:L/I:N/C:N/UI:N/PR:N/AV:L/S:C/A:H/RL:O/E:U/RC:Cibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Spectrum ScaleIBM
  • 4.2.0.0Affected
  • 5.0.0.0Affected
  • 5.0.4.3Affected
  • 4.2.3.21Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.