IBM Aspera High-Speed Transfer Products Buffer Overflow Vulnerability in asperahttpd Component

A buffer overflow vulnerability has been identified in the asperahttpd component of IBM Aspera High-Speed Transfer Endpoint and IBM Aspera High-Speed Transfer Server, both versions 3.7.4 prior to 4.4.7 Fix Pack 1. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

Impact

Exploitation of this vulnerability could result in a denial of service, authentication bypass, or remote code execution.

Remediation

Users can upgrade to IBM Aspera High-Speed Transfer Server or Endpoint version 4.4.7 Fix Pack 2. Instructions for downloading this version are available on the IBM Support Fix Central website.