5.3
Moyenne
CVE-2020-4355 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a…
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DB2 for Linux- UNIX and Windows | 11.5 | Pas de correctif indiqué |
| DB2 for Linux- UNIX and Windows | 11.1 | Pas de correctif indiqué |
| DB2 for Linux- UNIX and Windows | 10.5 | Pas de correctif indiqué |
| DB2 for Linux- UNIX and Windows | 10.1 | Pas de correctif indiqué |
| DB2 for Linux- UNIX and Windows | 9.7 | Pas de correctif indiqué |
Autres CVE de DB2 for Linux- UNIX and Windows
Les 13 CVE de DB2 for Linux- UNIX and Windows →
CVE-2021-29702
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service…
7.5
Élevée
CVE-2020-4642
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local…
6.2
Moyenne
CVE-2020-4420
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an…
7.5
Élevée
CVE-2020-4414
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…
5.1
Moyenne