CVE-2016-6115 - Vulnerability Details

Vendors	Products
Ibm	General Parallel File System Spectrum Scale

Link	Providers
http://www.ibm.com/support/docview.wss?uid=ssg1S1009639
http://www.securityfocus.com/bid/95272

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Spectrum Scale", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "4.2.0"}, {"status": "affected", "version": "4.2.1"}, {"status": "affected", "version": "4.2.2"}]}], "datePublic": "2017-01-03T00:00:00", "descriptions": [{"lang": "en", "value": "IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash."}], "problemTypes": [{"descriptions": [{"description": "Gain Privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-02T10:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "95272", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/95272"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-6115", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Spectrum Scale", "version": {"version_data": [{"version_value": "4.1.1"}, {"version_value": "4.2.0"}, {"version_value": "4.2.1"}, {"version_value": "4.2.2"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Privileges"}]}]}, "references": {"reference_data": [{"name": "95272", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95272"}, {"name": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T01:22:20.618Z"}, "title": "CVE Program Container", "references": [{"name": "95272", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/95272"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-6115", "datePublished": "2017-02-01T22:00:00", "dateReserved": "2016-06-29T00:00:00", "dateUpdated": "2024-08-06T01:22:20.618Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Spectrum Scale (string)

vendor : IBM Corporation (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.1.1 (string)

}

1 : { »

status : affected (string)

version : 4.2.0 (string)

}

2 : { »

status : affected (string)

version : 4.2.1 (string)

}

3 : { »

status : affected (string)

version : 4.2.2 (string)

}

]

}

]

datePublic : 2017-01-03T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Gain Privileges (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-02-02T10:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

name : 95272 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/95272 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2016-6115 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Spectrum Scale (string)

version : { »

version_data : [ »

0 : { »

version_value : 4.1.1 (string)

}

1 : { »

version_value : 4.2.0 (string)

}

2 : { »

version_value : 4.2.1 (string)

}

3 : { »

version_value : 4.2.2 (string)

}

]

}

]

}

vendor_name : IBM Corporation (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Gain Privileges (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 95272 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/95272 (string)

}

1 : { »

name : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T01:22:20.618Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 95272 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/95272 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2016-6115 (string)

datePublished : 2017-02-01T22:00:00 (string)

dateReserved : 2016-06-29T00:00:00 (string)

dateUpdated : 2024-08-06T01:22:20.618Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E78F4327-0160-467E-8C2C-BDEBB4149227", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "BDD19B4F-5738-4CB1-99FC-F40FDA8388AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "B497D629-62AB-4F21-BDF4-02336A19E04C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "10E68BB2-4132-46F1-B8E9-9FA03FEB92BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "E1CBA1A7-02AF-4D59-A6FF-9C52903986EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "BEAC1912-1412-45B6-920C-A52510095977", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "59A4A5C6-8DF0-4431-BE2C-5C6815371C98", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "F90908FF-0E10-4AFD-A38C-4D5E50C05FF3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "591E5985-29A1-4C06-8832-DA1587CFE101", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "09C3AC64-B03E-4C63-B47D-608795A24321", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "2E29D816-7A73-47EA-8DE6-E553CA0D1079", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "18C5A85C-F932-44CF-B3EA-691737C96C52", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "9385B07C-881D-4A4E-A0F5-FF1BC88F8CFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "27319318-1C09-4CEE-BAE2-6E52C8FD8DCA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "85F22D48-CB9C-434A-AFD7-50E4E980D1DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "52D0326F-B03A-4476-8E94-BC0D8ADD5321", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "564BDF5A-EAFF-47F5-A670-2019BB508DD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "5E93E3DC-F8FA-493F-AD79-0DED309F3D9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "1578B640-B312-4BE8-8036-9DCC7201B04E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "07B77EAE-2C00-4FC9-82F1-42638E7948A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.1.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "B33EDF97-2750-4041-BCA3-77E1235173AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "9A55A717-5CA2-4073-80AA-16044EC23B7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "11BAE960-B5C8-4566-8D18-B2754069C933", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "D788F7B7-E3F5-495D-BF0D-EB5D6A57D84F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "33B349F3-C4A5-4EDA-8579-17AF297E4BA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "36357865-3811-45EF-98CB-0FA7D2FC0497", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:4.2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "6E32967B-9D22-4120-8C58-FCCC2ECC424F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash."}, {"lang": "es", "value": "IBM General Parallel File System es vulnerable a un desbordamiento de b\u00fafer. Un atacante remoto autenticado podr\u00eda desbordar un b\u00fafer y ejecutar c\u00f3digo arbitrario en el sistema con privilegios de root o provocar que el servidor se caiga."}], "id": "CVE-2016-6115", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-01T22:59:00.697", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95272"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1009639"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95272"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E78F4327-0160-467E-8C2C-BDEBB4149227 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : BDD19B4F-5738-4CB1-99FC-F40FDA8388AE (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : B497D629-62AB-4F21-BDF4-02336A19E04C (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 10E68BB2-4132-46F1-B8E9-9FA03FEB92BF (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : E1CBA1A7-02AF-4D59-A6FF-9C52903986EE (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : BEAC1912-1412-45B6-920C-A52510095977 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 59A4A5C6-8DF0-4431-BE2C-5C6815371C98 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.7:*:*:*:*:*:*:* (string)

matchCriteriaId : F90908FF-0E10-4AFD-A38C-4D5E50C05FF3 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 591E5985-29A1-4C06-8832-DA1587CFE101 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 09C3AC64-B03E-4C63-B47D-608795A24321 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2E29D816-7A73-47EA-8DE6-E553CA0D1079 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 18C5A85C-F932-44CF-B3EA-691737C96C52 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9385B07C-881D-4A4E-A0F5-FF1BC88F8CFF (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 27319318-1C09-4CEE-BAE2-6E52C8FD8DCA (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 85F22D48-CB9C-434A-AFD7-50E4E980D1DA (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 52D0326F-B03A-4476-8E94-BC0D8ADD5321 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 564BDF5A-EAFF-47F5-A670-2019BB508DD5 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 5E93E3DC-F8FA-493F-AD79-0DED309F3D9D (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 1578B640-B312-4BE8-8036-9DCC7201B04E (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.9:*:*:*:*:*:*:* (string)

matchCriteriaId : 07B77EAE-2C00-4FC9-82F1-42638E7948A2 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.1.1.10:*:*:*:*:*:*:* (string)

matchCriteriaId : B33EDF97-2750-4041-BCA3-77E1235173AF (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 9A55A717-5CA2-4073-80AA-16044EC23B7B (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 11BAE960-B5C8-4566-8D18-B2754069C933 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : D788F7B7-E3F5-495D-BF0D-EB5D6A57D84F (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 33B349F3-C4A5-4EDA-8579-17AF297E4BA0 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 36357865-3811-45EF-98CB-0FA7D2FC0497 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:4.2.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E32967B-9D22-4120-8C58-FCCC2ECC424F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash. (string)

}

1 : { »

lang : es (string)

value : IBM General Parallel File System es vulnerable a un desbordamiento de búfer. Un atacante remoto autenticado podría desbordar un búfer y ejecutar código arbitrario en el sistema con privilegios de root o provocar que el servidor se caiga. (string)

}

]

id : CVE-2016-6115 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : COMPLETE (string)

baseScore : 9 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:N/AC:L/Au:S/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-02-01T22:59:00.697 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95272 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1009639 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95272 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-119 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object