CVE-2023-30434

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
IBM	Elastic Storage System	>= 6.1.0.0, <= 6.1.2.5; >= 6.1.3.0, <= 6.1.6.0
IBM	Spectrum Scale	>= 5.1.0.0, <= 5.1.2.9; >= 5.1.3.0, <= 5.1.6.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/252187VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6988363Patch, Vendor Advisory
https://www.ibm.com/support/pages/node/6988365Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/252187VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6988363Patch, Vendor Advisory
https://www.ibm.com/support/pages/node/6988365Patch, Vendor Advisory

Timeline

Published: May 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-304355.4IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary CVE-2023-304365.4IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr CVE-2023-304375.3IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP reque CVE-2023-304388.8An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a CVE-2023-30443.3An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extra CVE-2023-304407.9IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and F CVE-2023-304417.5IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information CVE-2023-304427.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the CVE-2023-304436.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially c CVE-2023-304446.5IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authent CVE-2023-304457.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially c CVE-2023-304467.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially c