Skip to content
Sign in
7.5 High

CVE-2020-4135 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an…

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux- UNIX and Windows 11.5 No fix stated
DB2 for Linux- UNIX and Windows 11.1 No fix stated
DB2 for Linux- UNIX and Windows 10.5 No fix stated
DB2 for Linux- UNIX and Windows 10.1 No fix stated
DB2 for Linux- UNIX and Windows 9.7 No fix stated

Other CVEs of DB2 for Linux- UNIX and Windows

The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702 Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service… 7.5 High CVE-2020-4642 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local… 6.2 Medium CVE-2020-4420 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an… 7.5 High CVE-2020-4414 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… 5.1 Medium
Track this CVE