Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Aspera Faspex On Demand
Vendor
IBM
Product
Aspera Faspex On Demand
Platforms
Unknown
Default status
Unknown
Aspera Faspex On Demand · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.7.4
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Server On Demand
Vendor
IBM
Product
Aspera Server On Demand
Platforms
Unknown
Default status
Unknown
Aspera Server On Demand · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.7.4
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
Vendor
IBM
Product
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)
Platforms
Unknown
Default status
Unknown
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.9.10
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera High-Speed Transfer Endpoint
Vendor
IBM
Product
Aspera High-Speed Transfer Endpoint
Platforms
Unknown
Default status
Unknown
Aspera High-Speed Transfer Endpoint · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.9.3
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Streaming
Vendor
IBM
Product
Aspera Streaming
Platforms
Unknown
Default status
Unknown
Aspera Streaming · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.9.3
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Transfer Cluster Manager
Vendor
IBM
Product
Aspera Transfer Cluster Manager
Platforms
Unknown
Default status
Unknown
Aspera Transfer Cluster Manager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.3.1
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera High-Speed Transfer Server
Vendor
IBM
Product
Aspera High-Speed Transfer Server
Platforms
Unknown
Default status
Unknown
Aspera High-Speed Transfer Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.9.3
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Shares On Demand
Vendor
IBM
Product
Aspera Shares On Demand
Platforms
Unknown
Default status
Unknown
Aspera Shares On Demand · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.7.4
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Application Platform On Demand
Vendor
IBM
Product
Aspera Application Platform On Demand
Platforms
Unknown
Default status
Unknown
Aspera Application Platform On Demand · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.7.4
affected
Unavailable
Unavailable
Unavailable
None listed
Aspera Proxy Server
Vendor
IBM
Product
Aspera Proxy Server
Platforms
Unknown
Default status
Unknown
Aspera Proxy Server · Scoped product and version facts