Aspera vulnerabilities

2 known vulnerabilities in Aspera from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Aspera: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-27286Apr 2, 2023IBM

  IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.

• 9.8 Critical severity

  Aspera: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-27284Apr 2, 2023IBM

  IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616.