EUVD-2018-11839

Malware in sbrugna...

Code injection

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash...

CVE-2018-1205

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash...

CVE-2018-1205

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash...

CVE-2018-1205

Dell EMC ScaleIO (pre-2.5) is affected by CVE-2018-1205 due to improper handling of packet data in the MDM service. A remote attacker could exploit crafted packets to crash the MDM service. The CVE is documented with a CVSS v3 base score of 7.5 (HIGH) and CVSS v2 base score of 5.0 (MEDIUM). Publi...

PT-2018-10971

Name of the Vulnerable Software and Affected Versions Dell EMC ScaleIO versions prior to 2.5 Description The issue arises from improper handling of certain packet data in the MDM service, allowing a remote attacker to potentially send crafted packet data that could cause the MDM service to crash...

CVE-2018-1205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash...