What is the vulnerability ID for the IBM Spectrum Scale system core component vulnerability?

The vulnerability ID for the IBM Spectrum Scale system core component vulnerability is CVE-2021-29740.

What is the severity of CVE-2021-29740?

The severity of CVE-2021-29740 is high, with a CVSS score of 8.4.

Which IBM Spectrum Scale versions are affected by CVE-2021-29740?

IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 are affected by CVE-2021-29740.

What is the impact of the format string security vulnerability in the IBM Spectrum Scale system core component?

The format string security vulnerability in the IBM Spectrum Scale system core component could allow an attacker to execute arbitrary code in the context of the process memory, potentially escalating their privileges and taking control over the entire system.

Where can I find more information about CVE-2021-29740?

You can find more information about CVE-2021-29740 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/201474) and the IBM Support website (https://www.ibm.com/support/pages/node/6457629).

Vulnerability/
CVE-2021-29740

high

8.4

CWE

134

13/5/2021

7/6/2021

CVE-2021-29740

First published: Thu May 13 2021(Updated: )

IBM Spectrum Scalefile system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the entire system with root access.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Spectrum Scale	<=5.0.0 - 5.0.5.6
IBM Spectrum Scale	<=5.1.0 - 5.1.0.3
IBM Spectrum Scale	>=5.0.0.0<5.0.5.7
IBM Spectrum Scale	>=5.1.0<5.1.1.0

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6457629

Frequently Asked Questions

What is the vulnerability ID for the IBM Spectrum Scale system core component vulnerability?
The vulnerability ID for the IBM Spectrum Scale system core component vulnerability is CVE-2021-29740.
What is the severity of CVE-2021-29740?
The severity of CVE-2021-29740 is high, with a CVSS score of 8.4.
Which IBM Spectrum Scale versions are affected by CVE-2021-29740?
IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 are affected by CVE-2021-29740.
What is the impact of the format string security vulnerability in the IBM Spectrum Scale system core component?
The format string security vulnerability in the IBM Spectrum Scale system core component could allow an attacker to execute arbitrary code in the context of the process memory, potentially escalating their privileges and taking control over the entire system.
Where can I find more information about CVE-2021-29740?
You can find more information about CVE-2021-29740 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/201474) and the IBM Support website (https://www.ibm.com/support/pages/node/6457629).

collector/ibm-support
collector/nvd-index
vendor/ibm
canonical/ibm spectrum scale
version/ibm spectrum scale/5.0.0 - 5.0.5.6
version/ibm spectrum scale/5.1.0 - 5.1.0.3
version/ibm spectrum scale/5.0.0.0
version/ibm spectrum scale/5.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.