Vulnerability Details CVE-2021-20491
IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.9%
CVSS Severity
CVSS v3 Score 4.4
CVSS v2 Score 2.1
Products affected by CVE-2021-20491
-
cpe:2.3:a:ibm:spectrum_protect:7.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect:7.1.0.000
-
cpe:2.3:a:ibm:spectrum_protect:7.1.10.0
-
cpe:2.3:a:ibm:spectrum_protect:7.1.10.000
-
cpe:2.3:a:ibm:spectrum_protect:7.1.10.100
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.2
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.3
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.4
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.5
-
cpe:2.3:a:ibm:spectrum_protect:7.1.8.6
-
cpe:2.3:a:ibm:spectrum_protect:7.1.9.200
-
cpe:2.3:a:ibm:spectrum_protect:7.1.9.300
-
cpe:2.3:a:ibm:spectrum_protect:8.1.0.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.0.000
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.300
-
cpe:2.3:a:ibm:spectrum_protect:8.1.1.400
-
cpe:2.3:a:ibm:spectrum_protect:8.1.10.000
-
cpe:2.3:a:ibm:spectrum_protect:8.1.11.000
-
cpe:2.3:a:ibm:spectrum_protect:8.1.2
-
cpe:2.3:a:ibm:spectrum_protect:8.1.3
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.4.2
-
cpe:2.3:a:ibm:spectrum_protect:8.1.5
-
cpe:2.3:a:ibm:spectrum_protect:8.1.5.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.6.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.7.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.8.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.8.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.8.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9.0
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9.1
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9.100
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9.200
-
cpe:2.3:a:ibm:spectrum_protect:8.1.9.300