Skip to content
Sign in
5.3 Medium

CVE-2020-4355 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a…

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux- UNIX and Windows 11.5 No fix stated
DB2 for Linux- UNIX and Windows 11.1 No fix stated
DB2 for Linux- UNIX and Windows 10.5 No fix stated
DB2 for Linux- UNIX and Windows 10.1 No fix stated
DB2 for Linux- UNIX and Windows 9.7 No fix stated

Other CVEs of DB2 for Linux- UNIX and Windows

The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702 Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service… 7.5 High CVE-2020-4642 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local… 6.2 Medium CVE-2020-4420 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an… 7.5 High CVE-2020-4414 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… 5.1 Medium
Track this CVE