CVE-2020-5015

Name of the Vulnerable Software and Affected Versions IBM Elastic Storage System versions 6.0.0 through 6.0.1.2 IBM Elastic Storage Server versions 5.3.0 through 5.3.6.2

Description The issue allows a remote attacker to cause a denial of service by sending malformed UDP requests.

Recommendations For IBM Elastic Storage System versions 6.0.0 through 6.0.1.2, update to a version outside of this range to resolve the issue. For IBM Elastic Storage Server versions 5.3.0 through 5.3.6.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to UDP requests to minimize the risk of exploitation.