First published: Mon Oct 26 2015(Updated: )
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM General Parallel File System | =3.5 | |
IBM General Parallel File System | =3.5.0.0 | |
IBM General Parallel File System | =3.5.0.2 | |
IBM General Parallel File System | =3.5.0.3 | |
IBM General Parallel File System | =3.5.0.4 | |
IBM General Parallel File System | =3.5.0.6 | |
IBM General Parallel File System | =3.5.0.7 | |
IBM General Parallel File System | =3.5.0.8 | |
IBM General Parallel File System | =3.5.0.9 | |
IBM General Parallel File System | =3.5.0.10 | |
IBM General Parallel File System | =3.5.0.11 | |
IBM General Parallel File System | =3.5.0.12 | |
IBM General Parallel File System | =3.5.0.13 | |
IBM General Parallel File System | =3.5.0.14 | |
IBM General Parallel File System | =3.5.0.15 | |
IBM General Parallel File System | =3.5.0.16 | |
IBM General Parallel File System | =3.5.0.17 | |
IBM General Parallel File System | =3.5.0.18 | |
IBM General Parallel File System | =3.5.0.19 | |
IBM General Parallel File System | =3.5.0.20 | |
IBM General Parallel File System | =3.5.0.21 | |
IBM General Parallel File System | =3.5.0.22 | |
IBM General Parallel File System | =3.5.0.23 | |
IBM General Parallel File System | =3.5.0.24 | |
IBM General Parallel File System | =3.5.0.25 | |
IBM General Parallel File System | =3.5.0.26 | |
IBM Spectrum Scale | =4.1.1.0 | |
IBM Spectrum Scale | =4.1.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4981 has a medium severity rating as it allows local users to access sensitive information from system memory.
To fix CVE-2015-4981, upgrade to IBM General Parallel File System version 3.5.0.27 or higher, 4.1.1.2 or higher, or Spectrum Scale version 4.1.1.2 or higher.
Local users on IBM General Parallel File System versions 3.5.x before 3.5.0.27, 4.1.x before 4.1.1.2, and Spectrum Scale versions 4.1.1.x before 4.1.1.2 are affected.
CVE-2015-4981 potentially allows local users to access sensitive information stored in the system memory.
There are no known workarounds for CVE-2015-4981, the only solution is to update to the patched versions.