Skip to content
OpenAdvisories
High · 8.4 CVE-2020-4701 EUVD-2020-25948GHSA-xqw2-5rg4-323p

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improp…

Published Nov 19, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 10.5, 11.1, 11.5 —

References