CVE-2021-29672: Buffer Overflow

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/199479
• https://security.gentoo.org/glsa/202209-02
• https://www.ibm.com/support/pages/node/6445497 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6445497

Frequently Asked Questions

• What is the severity of CVE-2021-29672?

  The severity of CVE-2021-29672 is high with a CVSS score of 8.4.

• Which software versions are affected by CVE-2021-29672?

  IBM Spectrum Protect Client versions 8.1.0.0-8 through 1.11.0 and IBM Spectrum Protect for Space Management versions 8.1.0.0-8 through 1.11.0 are affected.

• How does CVE-2021-29672 exploit work?

  CVE-2021-29672 is a stack-based buffer overflow vulnerability that is exploited by a local attacker overflowing a buffer and executing arbitrary code on the system with elevated privileges or causing a denial-of-service condition.

• Are there any references available for CVE-2021-29672?

  Yes, you can find references for CVE-2021-29672 at the following links: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/199479), [Reference 2](https://security.gentoo.org/glsa/202209-02), [Reference 3](https://www.ibm.com/support/pages/node/6445497).

• What is the Common Weakness Enumeration (CWE) ID for CVE-2021-29672?

  The Common Weakness Enumeration (CWE) ID for CVE-2021-29672 is CWE-119 and CWE-787.