IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
BID:73283
Info
IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
| Bugtraq ID: | 73283 |
| Class: | Design Error |
| CVE: |
CVE-2015-0199 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 18 2015 12:00AM |
| Updated: | Oct 09 2018 02:00PM |
| Credit: | Florian Grunow and Felix Wilhelm of ERNW |
| Vulnerable: |
IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.5 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Smart Analytics System 7710 0 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM Scale Out Network Attached Storage 1.5.1 IBM Scale Out Network Attached Storage 1.3.2 IBM Scale Out Network Attached Storage 1.3.1 IBM Scale Out Network Attached Storage 1.5.2.1 IBM Scale Out Network Attached Storage 1.5.2.0 IBM Scale Out Network Attached Storage 1.5 IBM Scale Out Network Attached Storage 1.4.3.4 IBM Scale Out Network Attached Storage 1.4.3.3 IBM Scale Out Network Attached Storage 1.4.2.1 IBM Scale Out Network Attached Storage 1.4.2.0 IBM Scale Out Network Attached Storage 1.4.1.0 IBM Scale Out Network Attached Storage 1.4.0.0 IBM Scale Out Network Attached Storage 1.3.2.3 IBM Scale Out Network Attached Storage 1.3.2.2 IBM Scale Out Network Attached Storage 1.3.0.5 IBM Scale Out Network Attached Storage 1.3.0.4 IBM Scale Out Network Attached Storage 1.3.0.0 IBM PureData System for Operational Analytics 1.1 (A1801) IBM PureData System for Operational Analytics 1.0 (A1791) IBM PureApplication System 2.1 IBM PureApplication System 2.0 IBM InfoSphere BigInsights 3.0 1 IBM InfoSphere BigInsights 3.0 0 IBM InfoSphere BigInsights 2.1.2 IBM InfoSphere BigInsights 2.1.1 IBM InfoSphere BigInsights 3.0.0.2 IBM InfoSphere BigInsights 2.1.0.3 IBM InfoSphere BigInsights 2.1.0.2 IBM InfoSphere BigInsights 2.1.0.1 IBM InfoSphere BigInsights 2.1.0.0 IBM InfoSphere BigInsights 2.1 IBM General Parallel File System(GPFS) 4.1 IBM General Parallel File System(GPFS) 4.1.0.6 IBM General Parallel File System(GPFS) 3.5.0.23 IBM General Parallel File System(GPFS) 3.4.0.31 IBM General Parallel File System (GPFS) 3.5.0.19 IBM General Parallel File System (GPFS) 3.5.0.16 IBM General Parallel File System (GPFS) 3.5.0 IBM General Parallel File System (GPFS) 3.4.0.27 IBM General Parallel File System (GPFS) 3.4.0 IBM DB2 Workgroup Server Edition 10.5 IBM DB2 Workgroup Server Edition 10.1 IBM DB2 pureScale Feature for Enterprise Server Edition 9.8 IBM DB2 Express Edition 10.5 IBM DB2 Express Edition 10.1 IBM DB2 Enterprise Server Edition 10.5 IBM DB2 Enterprise Server Edition 10.1 IBM DB2 Connect Unlimited Edition for System z 10.5 IBM DB2 Connect Unlimited Edition for System z 10.1 IBM DB2 Connect Unlimited Edition for System i 10.5 IBM DB2 Connect Unlimited Edition for System i 10.1 IBM DB2 Connect Enterprise Edition 10.5 IBM DB2 Connect Enterprise Edition 10.1 IBM DB2 Connect Application Server Edition 10.5 IBM DB2 Connect Application Server Edition 10.1 IBM DB2 Advanced Workgroup Server Edition 10.5 IBM DB2 Advanced Workgroup Server Edition 10.1 IBM DB2 Advanced Enterprise Server Edition 10.5 IBM DB2 Advanced Enterprise Server Edition 10.1 |
| Not Vulnerable: |
IBM Storwize V7000 Unified 1.5.2.1 IBM Scale Out Network Attached Storage 1.5.2.1 IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.0.0.1 Interim Fix IBM General Parallel File System(GPFS) 4.1.0.7 IBM General Parallel File System(GPFS) 3.5.0.24 IBM General Parallel File System(GPFS) 3.4.0.32 IBM DB2 Workgroup Server Edition 10.5 FP6 IBM DB2 Workgroup Server Edition 10.1 FP5 IBM DB2 Express Edition 10.5 FP6 IBM DB2 Express Edition 10.1 FP5 IBM DB2 Enterprise Server Edition 10.5 FP6 IBM DB2 Enterprise Server Edition 10.1 FP5 IBM DB2 Connect Unlimited Edition for System z 10.5 FP6 IBM DB2 Connect Unlimited Edition for System z 10.1 FP5 IBM DB2 Connect Unlimited Edition for System i 10.5 FP6 IBM DB2 Connect Unlimited Edition for System i 10.1 FP5 IBM DB2 Connect Enterprise Edition 10.5 FP6 IBM DB2 Connect Enterprise Edition 10.1 FP5 IBM DB2 Connect Application Server Edition 10.5 FP6 IBM DB2 Connect Application Server Edition 10.1 FP5 IBM DB2 Advanced Workgroup Server Edition 10.5 FP6 IBM DB2 Advanced Workgroup Server Edition 10.1 FP5 IBM DB2 Advanced Enterprise Server Edition 10.5 FP6 IBM DB2 Advanced Enterprise Server Edition 10.1 FP5 |
Discussion
IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
IBM General Parallel File System is prone to a local denial-of-service vulnerability.
A local attacker can exploit this issue to cause a denial-of-service condition.
IBM General Parallel File System is prone to a local denial-of-service vulnerability.
A local attacker can exploit this issue to cause a denial-of-service condition.
Exploit / POC
IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM General Parallel File System CVE-2015-0199 Local Denial of Service Vulnerability
References:
References:
- IBM Homepage (IBM)
- IBM PureApplication System is affected by security vulnerabilities (CVE-2015-019 (IBM)
- Multiple vulnerabilities in GPFS affects IBM® DB2® LUW on AIX and Linux (IBM)
- Security Bulletin: GPFS security vulnerabilities in IBM SONAS (CVE-2015-0197 and (IBM)
- Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified ( (IBM)
- Security Bulletin: IBM General Parallel File System is affected by security vuln (IBM)
- Security Bulletin: Vulnerabilities in GPFS affect InfoSphere BigInsights (CVE-20 (IBM)
- swg21962616 : Multiple security vulnerabilities have been identified in IBM Gene (IBM)