Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights ( CVE-2020-4135, CVE-2020-4200, CVE-2020-4204)

Summary

There are multiple vulnerabilities in IBM® DB2, Version 10.5 that is used by IBM Operations Analytics Predictive Insights 1.3.6 and earlier. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

Please consult the security bulletin IBM® Db2® is vulnerable to denial of service (CVE-2020-4200) for vulnerability details and information about fixes.

Please consult the security bulletin Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2020-4204) for vulnerability details and information about fixes.

Please consult the security bulletin IBM® Db2® is vulnerable to denial of service (CVE-2020-4135) for vulnerability details and information about fixes.

Workarounds and Mitigations

None