Description (CNA)
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Aspera Faspex On Demand | affected 3.7.4 |
| IBM / Aspera Server On Demand | affected 3.7.4 |
| IBM / Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) | affected 3.9.10 |
| IBM / Aspera High-Speed Transfer Endpoint | affected 3.9.3 |
| IBM / Aspera Streaming | affected 3.9.3 |
| IBM / Aspera Transfer Cluster Manager | affected 1.3.1 |
| IBM / Aspera High-Speed Transfer Server | affected 3.9.3 |
| IBM / Aspera Shares On Demand | affected 3.7.4 |
| IBM / Aspera Application Platform On Demand | affected 3.7.4 |
| IBM / Aspera Proxy Server | affected 1.4.3 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6221324
- https://exchange.xforce.ibmcloud.com/vulnerabilities/180814
ADP enrichment
No English description supplied.