PT-2021-18442 · Ibm · Ibm Spectrum Scale

Published 2021-06-01 · Updated 2021-06-07 · CVE-2021-29740

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 IBM Spectrum Scale versions 5.1.0 through 5.1.0.3

Description The system core component is affected by a format string security issue. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access.

Recommendations For IBM Spectrum Scale versions 5.0.0 through 5.0.5.6, update to a version outside of this range to resolve the issue. For IBM Spectrum Scale versions 5.1.0 through 5.1.0.3, update to a version outside of this range to resolve the issue.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2021-29740

Affected Products

Ibm Spectrum Scale

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/201474 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29740 · Security Note
• https://ibm.com/support/pages/node/6457629 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29740 · Vendor Advisory
• https://t.me/cvenotify/15330 · Telegram Post