IBM General Parallel File System vulnerabilities

14 CVEs affecting IBM General Parallel File System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1431, published 2018-06-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0198, published 2015-03-24. High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and…
CVE-2016-6115, published 2017-02-01. High severity, CVSS 7.2. EPSS: 4% chance of exploitation in the next 30 days. IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the…
CVE-2016-0361, published 2016-08-08. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote…
CVE-2014-0834, published 2014-02-04. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon crash) via crafted arguments to a setuid program.
CVE-2015-1890, published 2015-04-06. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive…
CVE-2015-4974, published 2015-10-26. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via…
CVE-2015-0197, published 2015-03-24. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.
CVE-2015-0199, published 2015-03-24. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. The mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service (memory…
CVE-2015-4981, published 2015-10-26. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory…
CVE-2018-1431, published 2018-06-13. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify…

Latest

CVE-2017-1654, published 2018-03-02. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force…
CVE-2016-2985, published 2016-11-25. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via…
CVE-2016-2984, published 2016-11-25. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via…
CVE-2015-7403, published 2016-01-02. Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect…