4.7

CVE-2023-33832

IBM Storage Protect denial of service

IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality.  IBM X-Force ID:  256012.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Spectrum Protect Client Version >= 8.1.0.0 <= 8.1.17.0
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Ibm ≫ Spectrum Protect For Space Management Version >= 8.1.0.0 <= 8.1.17.0
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Ibm ≫ Spectrum Protect For Virtual Environments Version >= 8.1.0.0 <= 8.1.17.0
   Ibm ≫ Aix Version -
   Linux ≫ Linux Kernel Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.031
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
IBM 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

https://exchange.xforce.ibmcloud.com/vulnerabilities/256012
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/7011761
Patch
Vendor Advisory