Vulnerability · Published Apr 30, 2021 · Assigned by ibm
CVE-2021-20515
Medium 6.7
In plain English
A medium-severity security flaw in Informix Dynamic Server from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.0)6.7Medium
Exploit odds (30 days)0.3%top 75.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or cause a denial of service condition. IBM X-Force ID: 198366.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Informix Dynamic Server | 14.1 |
References
- https://www.ibm.com/support/pages/node/6448568 x_refsource_CONFIRM
- ibm-informix-cve202120515-bo (198366) vdb-entry, x_refsource_XF