Null pointer dereference

2010-10-0522:00:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.1%

JSON

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash, and recovery failure) by specifying a large size value within TCP packet data. NOTE: this might overlap CVE-2010-3061.

CPENameOperatorVersion
tivoli_storage_manager_fastbackeq6.1.0.0
tivoli_storage_manager_fastbackeq6.1.0.1
tivoli_storage_manager_fastbackeq5.5.3.0
tivoli_storage_manager_fastbackeq5.5.0
tivoli_storage_manager_fastbackeq5.5.4.0
tivoli_storage_manager_fastbackeq5.5.5.0
tivoli_storage_manager_fastbackeq5.5.2
tivoli_storage_manager_fastbackeq5.5.6.0
tivoli_storage_manager_fastbackeq5.5.1
tivoli_storage_manager_fastbackeq5.5.2.0

Name	Operator	Version
tivoli_storage_manager_fastback	eq	6.1.0.0
tivoli_storage_manager_fastback	eq	6.1.0.1
tivoli_storage_manager_fastback	eq	5.5.3.0
tivoli_storage_manager_fastback	eq	5.5.0
tivoli_storage_manager_fastback	eq	5.5.4.0
tivoli_storage_manager_fastback	eq	5.5.5.0
tivoli_storage_manager_fastback	eq	5.5.2
tivoli_storage_manager_fastback	eq	5.5.6.0
tivoli_storage_manager_fastback	eq	5.5.1
tivoli_storage_manager_fastback	eq	5.5.2.0