PT-2018-14204 · Ibm · Gpfs

Ryan Adamson · Publicado 2018-09-19 · Atualizado 2019-10-09 · CVE-2018-1782

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM GPFS versions 5.0.1.0 through 5.0.1.1

Description The issue allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system.

Recommendations For versions 5.0.1.0 and 5.0.1.1, consider restricting access to files stored on GPFS file systems to prevent unauthorized users from accessing or executing crafted files, and avoid using mmap to access files on GPFS file systems until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2018-1782

Produtos afetados

Gpfs

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/148805 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1782 · Nota de Segurança
• https://ibm.com/support/docview.wss?uid=ibm10730967 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1782 · Aviso do Fabricante