The vulnerability of the IBM DB2 database management system lies in the insufficient cleaning of special elements in the output data used by the incoming component, which allows a hacker to trigger a service failure.

🗓️ 15 Jun 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

A vulnerability in the database system arises from incomplete cleaning of special output data by the incoming component, enabling service interruption.

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing	18 Jun 202012:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights (CVE-2020-4230, CVE-2020-4135, CVE-2020-4200, CVE-2020-4161, CVE-2020-4204)	28 Aug 202018:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilties have been identified in IBM DB2 shipped with IBM Maximo Asset Management	23 Jul 202020:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202013:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management	18 Jun 202012:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Db2 affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise	5 Oct 202016:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DB2	19 Jun 202008:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform	19 Jun 202011:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt	19 Jun 202011:59	–	ibm

Vulners

Node

ibm ibm_db2Match11.5

OR

ibm ibm_db2_connect_serverMatch11.5

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/174341
ibm	www.ibm.com/support/pages/node/2874621
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-4161
web	www.web.nvd.nist.gov/view/vuln/detail

15 Jun 2021 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24

CVSS 36.5

EPSS0.01395

database vulnerability output data cleaning incoming component service interruption crafted commands