Security Bulletin: Multiple vulnerabilities in IBM DB2

Summary

Multiple vulnerabilities have been found in IBM DB2. DB2 users should refer to the security bulletins listed below for remediation actions.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

Security Bulletin: IBM® Db2® could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. (CVE-2020-4739)
<https://www.ibm.com/support/pages/node/6370023&gt;
Affected Releases: v9.1, v10.1, v10.5, v11.1, v11.5

Security Bulletin: IBM® Db2® is vulnerable to a buffer overflow (CVE-2020-4701)
<https://www.ibm.com/support/pages/node/6370025&gt;
Affected Releases: v10.5, v11.1, v11.5

Workarounds and Mitigations

None