CVE-2016-6115 — HIGH (7.2) — White Hats Nepal

Vulnerability Description

IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash.

CVSS Score

7.2

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ibm	General Parallel File System	4.1.0.0
Ibm	Spectrum Scale	4.1.0.0

Related Weaknesses (CWE)

CWE-119

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1009639PatchVendor Advisory
http://www.securityfocus.com/bid/95272Third Party AdvisoryVDB Entry
http://www.ibm.com/support/docview.wss?uid=ssg1S1009639PatchVendor Advisory
http://www.securityfocus.com/bid/95272Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-6115?

CVE-2016-6115 is a vulnerability with a CVSS score of 7.2 (HIGH). IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the ...

How severe is CVE-2016-6115?

CVE-2016-6115 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-6115?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm General Parallel File System, Ibm Spectrum Scale.