CVE-2021-20501 — Uncontrolled Resource Consumption in IBM I

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
8.2HIGHNVD
EPSS
0.5%
top 36.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM I
Timeline
PublishedApr 21
Latest updateMay 24

Description

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HExploitability: 3.9 | Impact: 4.2

Affected Packages2 packages

▶CVEListV5ibm/i4 versions+3
▶NVDibm/i4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-5c9g-84hr-f4w2: IBM i 7↗2022-05-24
▶
CVEList
CVE-2021-20501: IBM i 7↗2021-04-21
▶
CVE-2021-20501 — Uncontrolled Resource Consumption | cvebase