Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-20491

Опубликовано: 16 апр. 2021
Источник: nvd
CVSS3: 4.4
CVSS3: 4.4
CVSS2: 2.1
EPSS Низкий

Описание

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_protect:*:*:*:*:*:*:*:*
Версия от 7.1.0.000 (включая) до 7.1.13 (исключая)
cpe:2.3:a:ibm:spectrum_protect:*:*:*:*:*:*:*:*
Версия от 8.1.0.000 (включая) до 8.1.10.100 (включая)
cpe:2.3:a:ibm:spectrum_protect:8.1.11.000:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00048
Низкий

4.4 Medium

CVSS3

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787

Связанные уязвимости

github
больше 3 лет назад

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.

EPSS

Процентиль: 15%
0.00048
Низкий

4.4 Medium

CVSS3

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787