CVE-2020-4415: Buffer Overflow
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990.
Other sources
IBM Spectrum Protect server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4415?
CVE-2020-4415 is a vulnerability in IBM Spectrum Protect server that allows a remote attacker to execute arbitrary code or cause a denial of service.
How does CVE-2020-4415 impact IBM Spectrum Protect server?
CVE-2020-4415 can allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause a denial of service.
What is the severity of CVE-2020-4415?
CVE-2020-4415 has a severity rating of 9.8 out of 10, indicating it is a critical vulnerability.
Which versions of IBM Spectrum Protect server are affected by CVE-2020-4415?
IBM Spectrum Protect server versions 7.1.0.0-7.1.10.0 and 8.1.0.0-8.1.9.200 are affected by CVE-2020-4415.
How can I fix CVE-2020-4415?
To fix CVE-2020-4415, update the IBM Spectrum Protect server to a version that is not affected by the vulnerability.