CVE-2021-20491: Buffer Overflow
IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.
Other sources
IBM Spectrum Protect Server is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-20491?
CVE-2021-20491 is a vulnerability in IBM Spectrum Protect Server that allows an authorized administrator to overflow a buffer and crash the server by issuing a command with an improper parameter.
What is the severity of CVE-2021-20491?
CVE-2021-20491 has a severity value of 4.4, which is considered medium.
How does CVE-2021-20491 impact IBM Spectrum Protect Server?
CVE-2021-20491 can crash the IBM Spectrum Protect Server by causing a stack-based buffer overflow during command parsing.
How can an authorized administrator exploit CVE-2021-20491?
An authorized administrator can exploit CVE-2021-20491 by issuing a command with an improper parameter.
Is there a fix for CVE-2021-20491?
Yes, IBM has released updates to fix CVE-2021-20491. Please refer to the IBM support page for more information.