CVE-2020-4491

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2.0.0 through 4.2.3.22 IBM Spectrum Scale versions 5.0.0.0 through 5.0.5

Description The issue allows a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon, which would cause the service to crash.

Recommendations For IBM Spectrum Scale versions 4.2.0.0 through 4.2.3.22, update to a version outside of this range to resolve the issue. For IBM Spectrum Scale versions 5.0.0.0 through 5.0.5, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the mmfsd daemon to minimize the risk of exploitation.