High severity · published Feb 1, 2017
CVE-2016-6115
IBM General Parallel File System is vulnerable to a buffer overflow
7.2
CVSS
4%
EPSS
No
On KEV
Description
IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
General Parallel File System · Ibm
4.1.0.0; 4.1.0.1; 4.1.0.2; 4.1.0.3; 4.1.0.4; 4.1.0.5; +3 more · source: NVD
SS
Spectrum Scale · Ibm
4.1.0.0; 4.1.1.0; 4.1.1.1; 4.1.1.2; 4.1.1.3; 4.1.1.4; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6115
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6115
Patch
http://www.ibm.com/support/docview.wss?uid=ssg1S1009639
Third Party Advisory
http://www.securityfocus.com/bid/95272
More from General Parallel File System
7.8
CVE-2018-1431
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to…
7.0
CVE-2016-2985
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
7.0
CVE-2016-2984
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain…
6.5
CVE-2016-0361
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows…
4.0
CVE-2015-7403
IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of…