PT-2016-3759 · Ibm · Ibm Spectrum Scale+1

Published 2016-01-02 · Updated 2018-10-11 · CVE-2015-7403

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x before 4.1.1.3 General Parallel File System (GPFS) versions 3.5.x before 3.5.0.29 General Parallel File System (GPFS) versions 4.1.x through 4.1.0.8

Description The issue allows local users to cause a denial of service, resulting in an incorrect pointer dereference and node crash, via unspecified vectors.

Recommendations For IBM Spectrum Scale versions 4.1.1.x before 4.1.1.3, update to version 4.1.1.3 or later. For General Parallel File System (GPFS) versions 3.5.x before 3.5.0.29, update to version 3.5.0.29 or later. For General Parallel File System (GPFS) versions 4.1.x through 4.1.0.8, update to a version later than 4.1.0.8.

Fix

Related Identifiers

CVE-2015-7403

Affected Products

Ibm General Parallel File System

Ibm Spectrum Scale

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7403 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21972152 · Note
• http://securitytracker.com/id/1035094 · Note
• http://securityfocus.com/bid/79805 · Note