Security Bulletin: IBM® Db2® on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2020-4412)

Sep 10, 2020 8:00 pm EDT

Categorized: Medium Severity

Share this post:

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale. IBM Spectrum Scale is previously known as General Parallel File System (GPFS).

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V11.1, and V11.5 editions running on AIX and Linux are affected, and only for those customers who have Db2® pureScale™ Feature installed. IBM Db2 V10.5 is not affected.

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6330587

from IBM Product Security Incident Response Team https://ift.tt/3k3fcd6