IBM Support

IT47596: IBM STORAGE INSIGHTS SECURITY APAR FOR CVE-2024-47535

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • CVEID: CVE-2024-47535
Description: Netty is an asynchronous event-driven network
application framework for rapid development of maintainable high
performance protocol servers & clients. An unsafe reading of
environment file could potentially cause a denial of service in
Netty. When loaded on an Windows application, Netty attempts to
load a file that does not exist. If an attacker creates such a
large file, the Netty application crashes.

Local fix

  • 



Problem summary


    

  • ****************************************************************
* USERS AFFECTED:                                              *
* IBM Storage Insights users                                   *
*                                                              *
****************************************************************
* PROBLEM DESCRIPTION:                                         *
* SECURITY APAR FOR:                                           *
* CVE-2024-47535                                               *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************

    



Problem conclusion


    

  • The fix for this APAR is contained in the following release:

IBM Storage Insights 1Q25   [ 54X-IBM-SI ]
( release target 1Q 2025 / January )

To protect IBM Storage Insights against emerging
security vulnerabilities, the service was updated to
protected against vulnerabilities.

No action is required, there is nothing that you need
to do following the IBM Storage Insights upgrade.

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IT47596
    • 

  • Reported component name
    STORAGE INSIGHT
    • 

  • Reported component ID
    5608TPCSI
    • 

  • Reported release
    54X
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2025-01-28
    • 

  • Closed date
    2025-02-03
    • 

  • Last modified date
    2025-02-03
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    STORAGE INSIGHT
    • 

  • Fixed component ID
    5608TPCSI
    • 



Applicable component levels


    








      
              
                            

              

              [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSQRB8","label":"IBM Storage Insights"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"54X","Line of Business":{"code":"LOB69","label":"Storage TPS"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            13 January 2026
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback