CVE-2017-8019
HighSummary
An issue was discovered in EMC ScaleIO 2.0.1.x related to message parsers (MDM, SDS, and LIA) that could allow an unauthenticated remote attacker to send specially crafted packets. This could lead to stopping ScaleIO services and causing a denial of service situation.
Risk Assessment
An attacker could exploit this vulnerability to disrupt the operation of ScaleIO services, potentially leading to downtime and loss of availability of critical resources for the organization.
Recommendation
It is recommended to upgrade to the latest version of EMC ScaleIO to mitigate this vulnerability and to monitor network traffic for suspicious packets.
Other vulnerabilities in EMC ScaleIO 2.0.1.x
See all- CVE-2017-8001High
An issue was discovered in EMC ScaleIO 2.0.1.x where one of the support scripts saves the credentials of the MDM user in clear text in temporary log files. These files may be read by an unprivileged user with access to the server where the script was executed.
- CVE-2016-9867High
An issue was discovered in EMC ScaleIO versions before 2.0.1.1, allowing a low-privileged local attacker to modify kernel memory in the SCINI driver. This may lead to code execution and privilege escalation to root on ScaleIO Data Client (SDC) servers.
- CVE-2017-8020Critical
A buffer overflow vulnerability was discovered in EMC ScaleIO 2.0.1.x in the SDBG service, which may allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.
Original NVD description (English source)
An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets to stop ScaleIO services and cause a denial of service situation.