CVE-2020-4756

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-20 · updated 2026-06-17
Weakness: CWE-404

Description

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM X-Force ID: 188599.

Affected products

IBM Elastic Storage Server: from 6.0.0.0 through 6.0.1.0
IBM Spectrum Scale: from 4.2.0.0 (excl.) through 4.2.3.23; from 5.0.0.0 (excl.) through 5.0.5.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/188599
https://www.ibm.com/support/pages/node/6349469
https://www.ibm.com/support/pages/node/6349475
https://exchange.xforce.ibmcloud.com/vulnerabilities/188599
https://www.ibm.com/support/pages/node/6349469
https://www.ibm.com/support/pages/node/6349475

Get alerted when CVE-2020-4756 or the next vulnerability affects your stack