Security Bulletin: Multiple vulnerabilites in IBM Db2 affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary

IBM Db2 is shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Vulnerabilities have been identified in IBM Db2 and the information about their fixes are published in security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

The recommended solution is to manually upgrade to the appropriate fix on IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5.0.10.

Consult the following IBM Db2 security bulletins for the vulnerability details and information about their fixes:

Security: IBM® Db2® is vulnerable to privilege escalation (CVE-2020-4230)

Security: IBM® Db2® is vulnerable to denial of service (CVE-2020-4135)

Security: Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2020-4204)

Security: IBM® Db2® is vulnerable to denial of service (CVE-2020-4200).

Security: IBM® Db2® is vulnerable to denial of service (CVE-2020-4161)

Workarounds and Mitigations

None