CVE-2021-20546: Buffer Overflow
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934
Other sources
IBM Spectrum Protect Client is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this IBM Spectrum Protect Client vulnerability?
The vulnerability ID for this IBM Spectrum Protect Client vulnerability is CVE-2021-20546.
What is the title of this vulnerability?
The title of this vulnerability is 'IBM Spectrum Protect Client is vulnerable to a stack-based buffer overflow caused by improper bounds checking'.
What is the severity of CVE-2021-20546?
The severity of CVE-2021-20546 is medium.
How can a local attacker exploit this vulnerability?
A local attacker can exploit this vulnerability by overflowing a buffer and causing the application to crash.
What is the affected software for this vulnerability?
The affected software for this vulnerability includes IBM Spectrum Protect Client (version 8.1.0.0 through 8.1.11.0), IBM Spectrum Protect for Space Management (version 8.1.0.0 through 8.1.11.0), IBM Spectrum Protect Backup-Archive Client (version 8.1.0.0-8.1.11.07.1.0.0-7.1.8.10), and IBM Spectrum Protect for Space Management (version 8.1.0.0-8.1.11.07.1.0.0-7.1.8.10).