Vulnerabilities > CVE-2021-20546 - Out-of-bounds Write vulnerability in IBM products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

ibm

CWE-787

NVD

Published: 2021-04-26

Updated: 2024-11-21

Summary

IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Spectrum Protect Client 8.1.0.0 IBM Spectrum Protect Client 8.1.2 IBM Spectrum Protect Client 8.1.3 IBM Spectrum Protect Client 8.1.4 IBM Spectrum Protect Client 8.1.4.1 IBM Spectrum Protect Client 8.1.4.2 IBM Spectrum Protect Client 8.1.5 IBM Spectrum Protect Client 8.1.6 IBM Spectrum Protect Client 8.1.7.0 IBM Spectrum Protect Client 8.1.9.0 IBM Spectrum Protect Client 8.1.9.1 IBM Spectrum Protect FOR Space Management 8.1.0.0 IBM Spectrum Protect FOR Space Management 8.1.2.0 IBM Spectrum Protect FOR Space Management 8.1.4.0 IBM Spectrum Protect FOR Space Management 8.1.6.0 IBM Spectrum Protect FOR Space Management 8.1.7.0 IBM Spectrum Protect FOR Space Management 8.1.9.0 IBM Spectrum Protect FOR Space Management 8.1.9.1	32

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References