Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
None
Attack Vector
Local
0

CVE-2017-1304

Disclosure Date: June 21, 2017
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.2 Medium
Impact Score:
4.7
Exploitability Score:
1.4
Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
High
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
Low
Integrity (I):
Low
Availability (A):
High

General Information

Vendors

  • ibm

Products

  • elastic storage server 2.0.0,
  • elastic storage server 2.5.0,
  • elastic storage server 2.5.5,
  • elastic storage server 3.0.0,
  • elastic storage server 3.0.5,
  • elastic storage server 3.5.0,
  • elastic storage server 3.5.6,
  • elastic storage server 4.0.0,
  • elastic storage server 4.0.6,
  • elastic storage server 4.5.0,
  • elastic storage server 4.6.0,
  • elastic storage server 5.0.0,
  • elastic storage server 5.0.1

Additional Info

Technical Analysis