CVE-2018-1782: Medium severity ibm spectrum scale vulnerability

Published Sep 19, 2018

Updated

IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system. IBM X-Force ID: 148805.

Affected Software

2 affected components

IBM Spectrum Scale=5.0.1.0

IBM Spectrum Scale=5.0.1.1

Event History

Sep 19, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1782?

CVE-2018-1782 is considered to have a high severity due to its potential to cause kernel panic.

How do I fix CVE-2018-1782?

To mitigate CVE-2018-1782, it is recommended to update IBM Spectrum Scale to a version that is not affected, such as versions beyond 5.0.1.1.

Who is affected by CVE-2018-1782?

Local, unprivileged users on nodes running IBM Spectrum Scale versions 5.0.1.0 and 5.0.1.1 are affected by CVE-2018-1782.

Can CVE-2018-1782 be exploited remotely?

No, CVE-2018-1782 requires local access to the file system to exploit the vulnerability.

What impact does CVE-2018-1782 have on the system?

CVE-2018-1782 can lead to a kernel panic, resulting in system instability and potential downtime.