CVE-2025-36061: TS4500 Tape Library Denial of Service
IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Storage TS4500 Library / IBM Diamondback Tape Libraryto a version that resolves this vulnerability.Fixed in 1.12.0.4
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user can exploit it. The CVSS vector indicates network access is sufficient and no user interaction is required.
What is the impact of successful exploitation?
Specially crafted SMTP requests can consume excessive system resources and cause a denial of service. The provided CVSS metrics indicate availability impact only, with no stated confidentiality or integrity impact.
Which versions are identified as affected?
IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 are identified as affected. The provided information does not specify a separate affected-version range for IBM Diamondback Tape Library.