CVE-2021-39056 — IBM I vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.3%
top 48.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM I
Timeline
PublishedJan 13
Latest updateJan 14

Description

The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/i4 versions+3
▶NVDibm/i4 versions+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-52w9-4w5g-hqxc: The IBM i 7↗2022-01-14
▶
CVEList
CVE-2021-39056: The IBM i 7↗2022-01-13
▶
CVE-2021-39056 — IBM I vulnerability | cvebase