CVE-2015-4981: Infoleak

Published Oct 26, 2015

Updated

IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors.

Affected Software

28 affected components

IBM General Parallel File System=3.5

IBM General Parallel File System=3.5.0.0

IBM General Parallel File System=3.5.0.2

IBM General Parallel File System=3.5.0.3

IBM General Parallel File System=3.5.0.4

IBM General Parallel File System=3.5.0.6

IBM General Parallel File System=3.5.0.7

IBM General Parallel File System=3.5.0.8

IBM General Parallel File System=3.5.0.9

IBM General Parallel File System=3.5.0.10

IBM General Parallel File System=3.5.0.11

IBM General Parallel File System=3.5.0.12

IBM General Parallel File System=3.5.0.13

IBM General Parallel File System=3.5.0.14

IBM General Parallel File System=3.5.0.15

IBM General Parallel File System=3.5.0.16

IBM General Parallel File System=3.5.0.17

IBM General Parallel File System=3.5.0.18

IBM General Parallel File System=3.5.0.19

IBM General Parallel File System=3.5.0.20

IBM General Parallel File System=3.5.0.21

IBM General Parallel File System=3.5.0.22

IBM General Parallel File System=3.5.0.23

IBM General Parallel File System=3.5.0.24

IBM General Parallel File System=3.5.0.25

IBM General Parallel File System=3.5.0.26

IBM Spectrum Scale=4.1.1.0

IBM Spectrum Scale=4.1.1.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366

Event History

Oct 26, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4981?

CVE-2015-4981 has a medium severity rating as it allows local users to access sensitive information from system memory.

How do I fix CVE-2015-4981?

To fix CVE-2015-4981, upgrade to IBM General Parallel File System version 3.5.0.27 or higher, 4.1.1.2 or higher, or Spectrum Scale version 4.1.1.2 or higher.

Who is affected by CVE-2015-4981?

Local users on IBM General Parallel File System versions 3.5.x before 3.5.0.27, 4.1.x before 4.1.1.2, and Spectrum Scale versions 4.1.1.x before 4.1.1.2 are affected.

What type of information can be accessed through CVE-2015-4981?

CVE-2015-4981 potentially allows local users to access sensitive information stored in the system memory.

Is there a workaround for CVE-2015-4981?

There are no known workarounds for CVE-2015-4981, the only solution is to update to the patched versions.