CVE-2020-4414

CVE-2020-4414 affects IBM DB2 products. IBM Db2 for Linux, UNIX and Windows (including DB2 Connect Server) across versions 9.7, 10.1, 10.5, 11.1 and 11.5 could allow a local attacker to perform unauthorized actions via improper usage of shared memory, potentially obtaining sensitive information o...

CVE-2020-4420

CVE-2020-4420 affects IBM DB2 for Linux, UNIX and Windows (including DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5. An unauthenticated attacker could cause a denial of service via a hang in the execution of a terminate command. CVSS v3.0 base score 7.5 (network, high availability impact). R...

CVE-2020-4387

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179269...

CVE-2020-4386

CVE-2020-4386 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5. Local users could obtain sensitive information due to a race condition involving a symbolic link. The IBM security bulletins describe the vulnerability and provide remediations via...

CVE-2020-4386

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179268...

CVE-2020-4387

CVE-2020-4387 describes a local information-disclosure vulnerability in IBM DB2 and DB2 Connect Server for Linux/Unix/Windows (versions 9.7, 10.1, 10.5, 11.1, 11.5) caused by a race condition of a symbolic link. Exploitation would allow a local attacker to obtain sensitive data as described in IB...

CVE-2020-4363

CVE-2020-4363 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) across DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5. Root cause: a buffer overflow due to improper bounds checking, enabling a local attacker with access to execute arbitrary code with root privileges. Impact is l...

CVE-2020-4363

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960...

CVE-2020-4355

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer SSL renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this...

CVE-2020-4355

IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) versions 9.7, 10.1, 10.5, 11.1 and 11.5 are affected by CVE-2020-4355 due to improper SSL renegotiation handling, enabling a remote attacker to cause high resource usage and a denial of service. Connected IBM bulletins corroborate the ...

Security Bulletin: Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2020-4204).

Summary Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation from an authenticated local user to root. Vulnerability Details CVEID: CVE-2020-4204 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is vulnerable to a buffer overflow,...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an escalation of...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Program Management

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Program Management Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an escalation of privilege...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an...

Security Bulletin: Multiple vulnerabilities in DB2

Summary Multiple vulnerabilities were found in DB2 which affect IBM i2 EIA Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM i2 Analyze| IBM i2 Analyze 4.3.1 IBM i2 Analyze| IBM i2...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an escalation of privileg...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an escalation of privilege when an...

Security Bulletin: Multiple vulnerabilities have been identified in DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights

Summary DB2 contains several vulnerabilities which can affect the IBM Predictive Maintenance and Quality and Predictive Maintenance Insights products. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details Refer to the...

Security Bulletin: Multiple security vulnerabilities may affect DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about vulnerabilities affecting DB2 leading to denial of service or privilege escalation has been published in below security bulletin. Vulnerability Details Refer t...

Security Bulletin: IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is vulnerable to denial of service

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about some security vulnerability affecting DB2 has been published in below security bulletin. Vulnerability Details Refer to the security bulletins listed in the...