CVE-2020-4217

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0

Description The issue is related to insufficient checking of unusual or exceptional states in the file system component of IBM Spectrum Scale. This can be exploited by a remote attacker to cause a denial of service by forcing the mmfsd/mmsdrserv daemons to exit unexpectedly, which impacts the functionality of the Spectrum Scale cluster and the availability of managed file systems.

Recommendations For IBM Spectrum Scale versions 4.2 through 5.0, consider restricting access to the mmfsd/mmsdrserv daemons as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.