PT-2020-18065 · Ibm · Ibm Aspera

Published 2020-06-10 · Updated 2021-07-21 · CVE-2020-4433

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Aspera (affected versions not specified)

Description The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause the server to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

CVE-2020-4433

Affected Products

Ibm Aspera

References · 5

• https://ibm.com/support/pages/node/6221324 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/180814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4433 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4433 · Vendor Advisory
• https://t.me/cvenotify/4279 · Telegram Post