CVE-2020-4433

Published: Jun 10, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force ID: 180814.

Affected (10)

Products: Ibm: Aspera Application Platform On Demand, Aspera Faspex On Demand, Aspera High Speed Transfer Endpoint, Aspera High Speed Transfer Server, Aspera High Speed Transfer Server For Cloud Pak For Integration, Aspera Proxy Server, Aspera Server On Demand, Aspera Shares On Demand, Aspera Streaming, Aspera Transfer Cluster Manager

Ibm

10 products

Aspera Application Platform On Demand

Aspera Faspex On Demand

Aspera High Speed Transfer Endpoint

Aspera High Speed Transfer Server

Aspera High Speed Transfer Server For Cloud Pak For Integration

Aspera Proxy Server

Aspera Server On Demand

Aspera Shares On Demand

Aspera Streaming

Aspera Transfer Cluster Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Aspera Application Platform On Demand	Up to 3.7.4
Ibm Aspera Faspex On Demand	Up to 3.7.4
Ibm Aspera High Speed Transfer Endpoint	Up to 3.9.3
Ibm Aspera High Speed Transfer Server	Up to 3.9.3
Ibm Aspera High Speed Transfer Server For Cloud Pak For Integration	Up to 3.9.10
Ibm Aspera Proxy Server	Up to 1.4.3
Ibm Aspera Server On Demand	Up to 3.7.4
Ibm Aspera Shares On Demand	Up to 3.7.4
Ibm Aspera Streaming	Up to 3.9.3
Ibm Aspera Transfer Cluster Manager	Up to 1.3.1