CVE-2019-4087critical

CVE-2019-4087: falha crítica em IBM Spectrum Protect

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Spectrum Protect

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 7.0%
IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storage agent to crash. IBM X-Force ID: 157510.
CVSS:3.0/AC:L/AV:N/UI:N/PR:N/A:H/S:U/I:H/C:H/RC:C/RL:O/E:U
Produtos afetados
IBM · Spectrum Protect
CVEs relacionadas — IBM Spectrum Protect

No mesmo produto, das mais perigosas para as menos.

CVE-2020-4415CRITICALCVE-2020-4415EPSS 8.1%CVE-2018-1786MEDIUMCVE-2018-1786EPSS 2.4%CVE-2016-8937—CVE-2016-8937EPSS 1.9%CVE-2019-4129LOWCVE-2019-4129EPSS 1.6%CVE-2020-4559MEDIUMCVE-2020-4559EPSS 1.3%CVE-2018-1853MEDIUMCVE-2018-1853EPSS 1.2%