CVE-2015-0198

CVE-2015-0198 affects IBM GPFS (V3.4/V3.5/V4.1) where cipherList configurations could allow remote authentication bypass and root-level code execution. IBM advisories and GPFS security bulletins detail affected versions and provide fixes: upgrade GPFS to 4.1.0.7, 3.5.0.24, or 3.4.0.32 as appropri...

CVE-2015-0197

CVE-2015-0197, CVE-2015-0198, and CVE-2015-0199 pertain to IBM GPFS (General Parallel File System) across GPFS 3.4/3.5/4.1 and related IBM products. The initial sources describe: CVE-2015-0197: local attacker with non-privileged account can execute programs with root privileges (vector: local). A...

CVE-2015-0199

CVE-2015-0199 concerns IBM General Parallel File System (GPFS). The vulnerability arises from the mmfslinux kernel module: a local attacker can cause kernel memory corruption and a denial of service by issuing specific ioctl calls to a character device. Affected GPFS versions are 3.4.x before 3.4...

CVE-2015-0197

IBM General Parallel File System GPFS 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors...

CVE-2015-0198

IBM General Parallel File System GPFS 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors...

KLA10487 Multiple vulnerabilities in IBM GPFS

Multiple serious vulnerabilities have been found in IBM GPFS. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code and gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be...

IBM General Parallel File System Multiple Vulnerabilities (Windows) (POODLE)

A version of IBM General Parallel File System GPFS 3.5.x prior to 3.5.0.21 is installed on the remote Windows host. It is, therefore, affected by the following OpenSSL related vulnerabilities : - An error exists related to DTLS SRTP extension handling and specially crafted handshake messages that...

IBM General Parallel File System 3.5 < 3.5.0.17 Multiple OpenSSL Vulnerabilities (Heartbleed)

A version of IBM General Parallel File System GPFS prior to 3.5.0.17 is installed on the remote host. It is, therefore, affected by multiple vulnerabilities related to OpenSSL: - An information disclosure vulnerability exists due to a flaw in the OpenSSL library, due to an implementation error in...

IBM General Parallel File System 3.4 < 3.4.0.27 / 3.5 < 3.5.0.16 DoS (Windows)

A version of IBM General Parallel File System GPFS prior to 3.4.0.27 / 3.5.0.16 is installed on the remote host. It is, therefore, affected by a denial of service vulnerability. An authenticated, non-root attacker can exploit this vulnerability by passing certain arguments to 'setuid' commands,...

IBM General Parallel File System 3.4 < 3.4.0.27 / 3.5 < 3.5.0.16 DoS (RHEL)

A version of IBM General Parallel File System GPFS prior to 3.4.0.27 / 3.5.0.16 is installed on the remote host. It is, therefore, affected by a denial of service vulnerability. An authenticated, non-root attacker can exploit this vulnerability by passing certain arguments to 'setuid' commands,...

CVE-2014-0834

IBM General Parallel File System GPFS 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service daemon crash via crafted arguments to a setuid program...

Code injection

IBM General Parallel File System GPFS 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service daemon crash via crafted arguments to a setuid program...

CVE-2014-0834

CVE-2014-0834 affects IBM General Parallel File System (GPFS). Affected versions: GPFS 3.4 up to 3.4.0.27 and 3.5 up to 3.5.0.16. Description: an authenticated, non-root attacker could cause a denial of service (GPFS daemon crash) by passing certain crafted arguments to a setuid program, potentia...

CVE-2014-0834

IBM General Parallel File System GPFS 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service daemon crash via crafted arguments to a setuid program...

SuSE 10 Security Update : coreutils (ZYPP Patch Number 7655)

This update of coreutils fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling users terminal via the TIOCSTI ioctl. This update also fixes the following non-security issues :...