What is CVE-2017-8020?

CVE-2017-8020 is a critical-severity vulnerability in Emc Scaleio, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-11-28.

How severe is CVE-2017-8020?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Emc Scaleio

CVE-2017-8020

An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.

Vulnerability class: Buffer Overflow

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Emc Scaleio — versions 2.0.1.0, 2.0.1.1, 2.0.1.2
N/a Emc Scaleio 2.0.1.x Version Family (2.0.1.3, 2.0.1.2, 2.0.1.1, 2.0.1) — versions EMC ScaleIO EMC ScaleIO 2.0.1.x version family (2.0.1.3, 2.0.1.2, 2.0.1.1, 2.0.1)

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

security_alert@emc.com (x_refsource_CONFIRM, Mailing List, Third Party Advisory)
security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-8020?: CVE-2017-8020 is a critical-severity vulnerability in Emc Scaleio, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-11-28.
How severe is CVE-2017-8020?: Critical severity. CVSS v3 base score is 9.8 out of 10.