IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS)…

Description

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458.

Scores

EPSS (exploitation in 30 days)

0.37% · top 69% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.

Weakness

• Denial of Service
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• IBM · Elastic Storage Server

  • affected 2.0
  • affected 2.5
  • affected 3.0
  • affected 3.5
  • affected 4.0
  • affected 4.5
  • affected 5.0

References (3)

• https://exchange.xforce.ibmcloud.com/vulnerabilities/125458 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.ibm.com/support/docview.wss?uid=ssg1S1010230 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 99274 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-1304](https://trackcve.app/badge/CVE-2017-1304.svg)](https://trackcve.app/cve/CVE-2017-1304)

Record last updated 5 Aug 2024, 13:32 UTC.