Skip to content
OpenAdvisories
High · 8.4 CVE-2020-5025 EUVD-2020-26272GHSA-p786-v2xq-fcfr

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow,…

Published Mar 11, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 10.5, 10.1, 9.7, 11.1, 11.5 —

References