Lucene search

K
nvd[email protected]NVD:CVE-2017-1304
HistoryJun 21, 2017 - 6:29 p.m.

CVE-2017-1304

2017-06-2118:29:00
CWE-119
web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458.

Affected configurations

NVD
Node
ibmelastic_storage_serverMatch2.0.0
OR
ibmelastic_storage_serverMatch2.5.0
OR
ibmelastic_storage_serverMatch2.5.5
OR
ibmelastic_storage_serverMatch3.0.0
OR
ibmelastic_storage_serverMatch3.0.5
OR
ibmelastic_storage_serverMatch3.5.0
OR
ibmelastic_storage_serverMatch3.5.6
OR
ibmelastic_storage_serverMatch4.0.0
OR
ibmelastic_storage_serverMatch4.0.6
OR
ibmelastic_storage_serverMatch4.5.0
OR
ibmelastic_storage_serverMatch4.6.0
OR
ibmelastic_storage_serverMatch5.0.0
OR
ibmelastic_storage_serverMatch5.0.1

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

Related for NVD:CVE-2017-1304