CVE-2017-8020: Buffer Overflow

Published Nov 28, 2017

Updated

An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.

Affected Software

4 affected components

EMC ScaleIO=2.0.1.0

EMC ScaleIO=2.0.1.1

EMC ScaleIO=2.0.1.2

EMC ScaleIO=2.0.1.3

Event History

Nov 28, 2017

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2017-8020.

What is the severity level of CVE-2017-8020?

The severity level of CVE-2017-8020 is critical with a CVSS score of 9.8.

What software is affected by CVE-2017-8020?

EMC ScaleIO versions 2.0.1.0 to 2.0.1.3 are affected by CVE-2017-8020.

What is the impact of CVE-2017-8020?

CVE-2017-8020 allows a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.

Are there any references for CVE-2017-8020?

Yes, you can find references for CVE-2017-8020 at the following links: [http://seclists.org/fulldisclosure/2017/Nov/35](http://seclists.org/fulldisclosure/2017/Nov/35) and [http://www.securityfocus.com/bid/101995](http://www.securityfocus.com/bid/101995).