CVE-2017-8019

Опубликовано: 28 нояб. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets to stop ScaleIO services and cause a denial of service situation.

Ссылки

http://seclists.org/fulldisclosure/2017/Nov/35
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/101991
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Nov/35
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/101991
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:scaleio:2.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:scaleio:2.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:scaleio:2.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:emc:scaleio:2.0.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.0275

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-g33r-4jrq-mf8v