PT-2018-10971 · Dell Emc · Dell Emc Scaleio

David Berard · Published 2018-03-27 · Updated 2018-04-24 · CVE-2018-1205

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC ScaleIO versions prior to 2.5

Description The issue arises from improper handling of certain packet data in the MDM service, allowing a remote attacker to potentially send crafted packet data that could cause the MDM service to crash.

Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-1205

Affected Products

Dell Emc Scaleio

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-1205 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1205 · Vendor Advisory
• http://seclists.org/fulldisclosure/2018/Mar/59 · Note