CVE-2015-0199: Medium severity ibm general parallel file system storage server vulnerability

Published Mar 24, 2015

Updated

The mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service (memory corruption) via unspecified character-device ioctl calls.

Affected Software

3 affected components

IBM General Parallel File System=3.4

IBM General Parallel File System=3.5

IBM General Parallel File System=4.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062

Event History

Mar 24, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0199?

CVE-2015-0199 has a moderate severity rating as it can lead to denial of service due to memory corruption.

How do I fix CVE-2015-0199?

To fix CVE-2015-0199, upgrade your IBM General Parallel File System to versions 3.4.0.32, 3.5.0.24, or 4.1.0.7 or later.

What software is affected by CVE-2015-0199?

CVE-2015-0199 affects IBM General Parallel File System versions 3.4, 3.5, and 4.1.

Can CVE-2015-0199 be exploited remotely?

CVE-2015-0199 primarily allows local users to exploit the vulnerability, meaning it cannot be exploited remotely.

What type of vulnerability is CVE-2015-0199?

CVE-2015-0199 is a memory corruption vulnerability that can cause denial of service.