CVE-2020-4412

🗓️ 19 May 2020 13:15:20Reported by ibmType

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM X-Force ID: 179987

Reporter	Title	Published	Views	Family All 10
IBM Security Bulletins	Security Bulletin: IBM Storwize V7000 Unified is affected by denail of service vulnerability in GPFS	12 Mar 202110:38	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in Spectrum Scale packaged in Elastic Storage Server where an unprivileged user to cause denial of service( CVE-2020-4412)	28 Aug 202017:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Elastic Storage System 3000 are affected by a vulnerability in IBM Spectrum Scale (CVE-2020-4412)	25 May 202223:01	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where an unprivileged user to cause denial of service( CVE-2020-4412)	18 May 202013:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2020-4412)	10 Sep 202015:16	–	ibm
CNVD	IBM Spectrum Scale Denial of Service Vulnerability (CNVD-2020-30675)	20 May 202000:00	–	cnvd
Cvelist	CVE-2020-4412	19 May 202013:15	–	cvelist
EUVD	EUVD-2020-25659	7 Oct 202500:30	–	euvd
NVD	CVE-2020-4412	19 May 202014:15	–	nvd
Prion	Denial of service	19 May 202014:15	–	prion

NVD

Vulners

Node

ibm spectrum_scaleRange4.2.0.0–4.2.3.21

ibm spectrum_scaleRange5.0.0.0–5.0.4.3

AND

ibm aixMatch-

linux linux_kernelMatch-

[
  {
    "product": "Spectrum Scale",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0.0"
      },
      {
        "status": "affected",
        "version": "5.0.0.0"
      },
      {
        "status": "affected",
        "version": "5.0.4.3"
      },
      {
        "status": "affected",
        "version": "4.2.3.21"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6209004
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/179987

21 Nov 2024 05:32Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 3.15.3

CVSS 35.3

EPSS0.00316