EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability

Bugtraq ID:	101995
Class:	Boundary Condition Error
CVE:	CVE-2017-8020
Remote:	Yes
Local:	No
Published:	Nov 20 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	David Berard
Vulnerable:	EMC ScaleIO 2.0.1 EMC ScaleIO 2.0.1.3 EMC ScaleIO 2.0.1.2 EMC ScaleIO 2.0.1.1
Not Vulnerable:	EMC ScaleIO 2.0.1.4

EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability

EMC ScaleIO is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

EMC ScaleIO 2.0.1.x prior to 2.0.1.4 are vulnerable.

EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC ScaleIO CVE-2017-8020 Buffer Overflow Vulnerability

References:

• EMC Homepage (EMC)
  
• ESA-2017-094: EMC ScaleIO (seclists)