CVE-2021-29672

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-26 · updated 2026-06-17
Weakness: CWE-787

Description

IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash. IBM X-Force ID: 199479

Affected products

IBM Spectrum Protect Client: from 8.1.0.0 through 8.1.11.0
IBM Spectrum Protect for Space Management: from 8.1.0.0 through 8.1.11.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/199479
https://security.gentoo.org/glsa/202209-02
https://www.ibm.com/support/pages/node/6445497
https://exchange.xforce.ibmcloud.com/vulnerabilities/199479
https://security.gentoo.org/glsa/202209-02
https://www.ibm.com/support/pages/node/6445497

Get alerted when CVE-2021-29672 or the next vulnerability affects your stack