CVE-2021-39049

IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking

Medium · published December 13, 2021

CVSS v3.0
5.3
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 214439.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AC:L/A:L/PR:N/S:U/C:L/I:L/AV:L/UI:R/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.4th percentile
Published
2021-12-13T18:35Z
EPSS history
Timeline
  • 13 DEC 18:35Z
    IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking
    cvelistv5