CVE-2021-29672

IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the…

High · published April 26, 2021

CVSS v3.0
8.4
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash. IBM X-Force ID: 199479

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/AC:L/C:H/PR:N/AV:L/UI:N/I:H/S:U/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.7th percentile
Published
2021-04-26T16:30Z
EPSS history
Timeline
  • 26 APR 16:30Z
    IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the…
    cvelistv5