Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4411

Опубликовано: 19 мая 2020
Источник: nvd
CVSS3: 7.1
CVSS3: 7.1
CVSS2: 4.9
EPSS Низкий

Описание

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*
Версия от 4.2.0.0 (включая) до 4.2.3.21 (включая)
cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*
Версия от 5.0.0.0 (включая) до 5.0.4.3 (включая)

Одно из

cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 13%
0.00043
Низкий

7.1 High

CVSS3

7.1 High

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github
больше 3 лет назад

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local attacker could invoke a subset of ioctls on the Spectrum Scale device with non-valid arguments. This could allow the attacker to crash the kernel. IBM X-Force ID: 179986.

EPSS

Процентиль: 13%
0.00043
Низкий

7.1 High

CVSS3

7.1 High

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20