CVE-2020-4756: ibm elastic_storage_server Improper Resource Shutdown or Release
Vulnerability summary
CVE-2020-4756 is a medium (CVSS 6.2) Improper Resource Shutdown or Release vulnerability in ibm elastic_storage_server. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27.6% of scored vulnerabilities.
Timeline
- 20-10-2020PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST6.2MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.35%
Chance of exploitation in the next 30 days
Percentile
28%
Versus all other CVEs
30-day change
0.00 pp
From 0.35% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- elastic_storage_server6.0.0 | 6.0.1.0 | ≥ 6.0.0.0, ≤ 6.0.1.0
- spectrum_scale4.2.0.0 | 5.0.0.0 | 4.2.3.23 | 5.0.5.2 | > 4.2.0.0, ≤ 4.2.3.23 | > 5.0.0.0, ≤ 5.0.5.2
1 vendor · 2 products