CVE-2020-4415
CRITICALIBM Spectrum Protect 7.1.0.0-7.1.9.9 - Stack-Based Buffer Overflow via Improper Bounds Checking
Title source: llmDescription
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6195706
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/179990
Scores
CVSS v3
9.8
EPSS
0.0805
EPSS Percentile
94.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
CWE-787
Status
published
Products (1)
ibm/spectrum_protect
7.1.0.0 - 7.1.10.0
Published
Apr 23, 2020
Tracked Since
Feb 18, 2026