CVE-2016-9868

Summary

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client (SDC) server unavailable until the next reboot.

Affected Software

VendorProductVersion RangeStatus
n/aEMC ScaleIO versions before 2.0.1.1EMC ScaleIO versions before 2.0.1.1affected

Weaknesses

  • Denial-of-service vulnerability via IOCTL calls

ADP Enrichment

CVE Program Container

Additional References

References