IBM Spectrum Scale Denial of Service Vulnerability (CNVD-2022-72217)

BM Spectrum Scale is a scalable data and file management solution from IBM based on IBM GPFS (an enterprise file management system optimized for petabyte-scale storage management). The product supports helping customers reduce storage costs while improving security and management efficiency in cloud, big data and analytics environments, etc. A denial of service vulnerability exists in IBM Spectrum Scale versions 5.0 and 5.1, which stems from allowing non-root users to use the request overflow mmfsd daemon, which could be exploited by an attacker to prevent the daemon from serving other requests service for other requests.