Skip to content
Sign in
5.1 Medium

CVE-2020-4414 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux- UNIX and Windows 11.5 No fix stated
DB2 for Linux- UNIX and Windows 11.1 No fix stated
DB2 for Linux- UNIX and Windows 10.5 No fix stated
DB2 for Linux- UNIX and Windows 10.1 No fix stated
DB2 for Linux- UNIX and Windows 9.1 No fix stated

Other CVEs of DB2 for Linux- UNIX and Windows

The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702 Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service… 7.5 High CVE-2020-4642 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local… 6.2 Medium CVE-2020-4420 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an… 7.5 High CVE-2020-4387 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local… 6.2 Medium
Track this CVE