CVE-2021-20491

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands

Medium · published April 16, 2021

CVSS v3.0
4.4
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.

The record
Technical detail
CVSS v3.0
4.4 · MEDIUM
Vector
CVSS:3.0/I:N/A:H/UI:N/C:N/S:U/AV:L/AC:L/PR:H/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.6th percentile
Published
2021-04-16T15:40Z
EPSS history
Timeline
  • 16 APR 15:40Z
    IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands
    cvelistv5