Security Bulletin: A format string vulnerability has been identified in IBM Spectrum Scale packaged in IBM Elastic Storage System (CVE-2021-29740)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System that could allow an attacker to execute arbirtary code in IBM Spectrum Scale file system. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-29740 DESCRIPTION: IBM Spectr...

Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System

Summary There are security vulnerabilities in versions of Linux Kernel that are shipped with versions of IBM Elastic Storage System. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-10774 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to...

Security Bulletin: Ansible vulnerability affects IBM Elastic Storage System (CVE-2021-20228)

Summary Ansible, which is used in IBM Elastic Storage System could allow a local authenticated attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2021-20228 DESCRIPTION: Ansible Engine could allow a local authenticated attacker to obtain sensitive information, caused by...

Security Bulletin: IBM Elastic Storage System systems are affected by vulnerabilities in OpenSSL

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVEID: CVE-2021-3450 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by a a missing check in the validation logic of X.509 certificate chains by the X509VFLAGX509STRI...

Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System

Summary There are security vulnerabilities in versions of Linux Kernel that are shipped with versions of IBM Elastic Storage System. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-16166 DESCRIPTION: Linux Kernel could allow a remote attacker to obtain sensitiv...

IBM Elastic Storage System Denial of Service Vulnerability (CNVD-2021-26383)

IBM Elastic Storage System is an appliance for data management of large data volumes from IBM in the United States. A denial of service vulnerability exists in IBM Elastic Storage System, which can be exploited by an attacker to deny service by sending a malformed UDP request...

CVE-2020-5015

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486...

Code injection

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486...

CVE-2020-5015

CVE-2020-5015 affects IBM Elastic Storage System (ESS) 6.0.0–6.0.1.2 and IBM Elastic Storage Server (ESS) 5.3.0–5.3.6.2, enabling a remote attacker to cause a denial of service by sending malformed UDP requests. Root cause details in connected files indicate an UDP-based DoS vector. Impact per so...

CVE-2020-5015

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486...

CVE-2020-5015: Undefined Security Weakness

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486...

PT-2021-12281

Name of the Vulnerable Software and Affected Versions IBM Elastic Storage System versions 6.0.0 through 6.0.1.2 IBM Elastic Storage Server versions 5.3.0 through 5.3.6.2 Description The issue allows a remote attacker to cause a denial of service by sending malformed UDP requests. Recommendations...

CVE-2020-5015

IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM X-Force ID: 193486...

IBM Elastic Storage System 安全漏洞

IBM Elastic Storage System is an appliance for data management of large data volumes from IBM in the United States. A denial of service vulnerability exists in IBM Elastic Storage System, which can be exploited by an attacker to deny service by sending a malformed UDP request...

Security Bulletin: A vulnerability in IBM® SDK, Java™ Technology Edition affects IBM Elastic Storage System

Summary A vulnerability in IBM® SDK, Java™ Technology Edition, used by IBM Elastic Storage System. This issue was disclosed as part of the IBM Java SDK updates in Jan 2021. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when...

Security Bulletin: A vulnerability in IBM Java SE affects IBM Elastic Storage System

Summary There is a vulnerability in IBM SDK Java Technology Edition, used by IBM Elastic Storage System. This issue was disclosed as part of the IBM Java SDK updates in Oct 2020. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the...

Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2020-1752)

Summary IBM Elastic Storage System is shipped with GNU glibc, for which a fix is available for a security vulnerability. Vulnerability Details CVEID: CVE-2020-1752 DESCRIPTION: GNU glibc could allow a local attacker to execute arbitrary code on the system, caused by a use-after-free. By creating ...

Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System

Summary There are security vulnerabilities in versions of Linux Kernel that are shipped with versions of IBM Elastic Storage System. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-14385 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by ...

Security Bulletin: A vulnerability in IBM Spectrum Scale packaged in IBM Elastic Storage System could cause a denial of service (CVE-2020-4756)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4756 DESCRIPTION: IBM Spectrum Scale could allow a loca...

CVE-2020-4756

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...