Vulnerability Description
IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Aspera Cargo | < 4.2.5 |
| Ibm | Aspera Connect | < 4.2.5 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/248616VDB Entry
- https://www.ibm.com/support/pages/node/6966588PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/248616VDB Entry
- https://www.ibm.com/support/pages/node/6966588PatchVendor Advisory
FAQ
What is CVE-2023-27284?
CVE-2023-27284 is a vulnerability with a CVSS score of 8.4 (HIGH). IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the syste...
How severe is CVE-2023-27284?
CVE-2023-27284 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-27284?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Aspera Cargo, Ibm Aspera Connect.