Skip to content
Sign in
8.4 High

CVE-2020-4363 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a…

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux- UNIX and Windows 11.5 No fix stated
DB2 for Linux- UNIX and Windows 11.1 No fix stated
DB2 for Linux- UNIX and Windows 10.5 No fix stated
DB2 for Linux- UNIX and Windows 10.1 No fix stated
DB2 for Linux- UNIX and Windows 9.7 No fix stated

Other CVEs of DB2 for Linux- UNIX and Windows

The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702 Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service… 7.5 High CVE-2020-4642 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local… 6.2 Medium CVE-2020-4420 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an… 7.5 High CVE-2020-4414 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… 5.1 Medium
Track this CVE