IBM Security Bulletin: Stack-Based Buffer Overflow Vulnerabilities in Spectrum Protect Back-up Archive Client and Spectrum Protect for Space Management

From IBM Corp.

IBM Spectrum Protect Backup-Archive Client and Spectrum Protect for Space Management are vulnerable to stack-based buffer overflows caused by improper bounds checking.

UDPATED: 14 June 2021 – Added 7.1 fix

Vulnerability details:
CVEID:   CVE-2021-29672
DESCRIPTION:  Spectrum Protect client is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash.
CVSS Base score: 8.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/199479 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:   CVE-2021-20546
DESCRIPTION:  Spectrum Protect Client is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/198934 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected products and versions:

Remediation/Fixes

Workarounds and mitigations
None

Get Notified about Future Security Bulletins
Subscribe to My Notifications to be notified of important product support alerts like this.

References:
Complete CVSS v3 Guide
On-line Calculator v3

Related information:
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

Acknowledgement

Change history:
April 25, 2021: Initial Publication
June 14, 2021: Added 7.1 fix

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an “industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response.” IBM PROVIDES THE CVSS SCORES “”AS IS”” WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.