PT-2020-18056 · Ibm · Spectrum Scale

Published 2020-05-19 · Updated 2020-05-20 · CVE-2020-4411

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Spectrum Scale versions 4.2.0.0 through 4.2.3.21 Spectrum Scale versions 5.0.0.0 through 5.0.4.3

Description The file system component of the affected software is susceptible to a denial of service issue due to a vulnerability in its kernel module. This could allow an attacker to cause a denial of service condition on the affected system by invoking a subset of ioctls on the device with non-valid arguments, potentially crashing the kernel.

Recommendations For versions 4.2.0.0 through 4.2.3.21, consider restricting access to the kernel module to minimize the risk of exploitation. For versions 5.0.0.0 through 5.0.4.3, consider restricting access to the kernel module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-4411

Affected Products

Spectrum Scale

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-4411 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4411 · Vendor Advisory
• https://ibm.com/support/pages/node/6209002 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/179986 · Vendor Advisory
• https://t.me/cvenotify/3907 · Telegram Post