high7.5
CVE-2020-4433
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.
Impact
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Aspera Application Platform On Demand | through 3.7.4 |
| Ibm | Aspera Faspex On Demand | through 3.7.4 |
| Ibm | Aspera High-Speed Transfer Endpoint | through 3.9.3 |
| Ibm | Aspera High-Speed Transfer Server | through 3.9.3 |
| Ibm | Aspera High-Speed Transfer Server For Cloud Pak For Integration | through 3.9.10 |
| Ibm | Aspera Proxy Server | through 1.4.3 |
| Ibm | Aspera Server On Demand | through 3.7.4 |
| Ibm | Aspera Shares On Demand | through 3.7.4 |
| Ibm | Aspera Streaming | through 3.9.3 |
| Ibm | Aspera Transfer Cluster Manager | through 1.3.1 |