Buffer overflow

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661...

CVE-2020-5025

CVE-2020-5025 affects IBM DB2 LUW (Linux/UNIX/Windows) and DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5. The vulnerability is a buffer overflow caused by improper bounds checking in db2fm, enabling a local attacker to execute arbitrary code with root privileges. Public sources in I...

CVE-2020-5025

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661...

CVE-2020-4976

CVE-2020-4976 affects IBM Db2 LUW (Linux/UNIX/Windows) including DB2 Connect Server, with versions 9.7, 10.1, 10.5, 11.1, and 11.5 at risk from a local attacker who can read and write specific files due to weak file permissions. The connected IBM security bulletins locate the fixed releases and r...

CVE-2020-5024

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660...

CVE-2020-4976

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469...

CVE-2020-5024

Summary of CVE-2020-5024 details from provided documents : IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due to a hang in the SSL handshake response. This is a remote/...

CVE-2020-5024: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660...

CVE-2020-5025: Buffer Copy without Checking Size of Input

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661...

IBM DB2 Privilege Bypass Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2, which can be exploited by an attacker to bypass access...

PT-2021-12290

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is caused by improper bounds checking, leading to a buffer overflow in the db2fm component. This could allow a local...

IBM DB2 Buffer Overflow Vulnerability (CNVD-2021-17192)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 has a security vulnerability that can be exploited by an attacker to trigger a denial of servi...

CVE-2020-4976: Incorrect Default Permissions

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469...

Security Bulletin: IBM® Db2® is vulnerable to denial of service (CVE-2020-4135).

Summary Db2 is vulnerable to a denial of service. Db2 could allow an attacker to send specially crafted packets to the Db2 server to cause excessive memory usage and cause Db2 to terminate abnormally. Vulnerability Details CVEID: CVE-2020-4135 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows...

Security Bulletin: IBM® Db2® is vulnerable to denial of service (CVE-2020-4200).

Summary Db2 is vulnerable to a denial of service. Authenticated users using a JDBC client may send specially crafted commands to cause Db2 to terminate abnormally. Vulnerability Details CVEID: CVE-2020-4200 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a...

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation (CVE-2020-4230).

Summary IBM Db2 is vulnerable to a priviledge escalation. An authenticated local attacker with special permissions can execute specially crafted Db2 commands to modify the owner of stored procedures to SYSIBM, causing a privilege escalation. Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION:...

Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.

Summary Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation. Vulnerability Details CVEID: CVE-2019-9512 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Ping Flood attack. By sending continual pings ...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service attack (CVE-2020-4420)

Summary IBM® Db2® could allow an unauthenticated attacker to cause a denial of service due to a hang in the execution of a terminate command. Vulnerability Details CVEID: CVE-2020-4420 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an unauthenticated...

Security Bulletin: IBM® Db2® on Windows is vulnerable to an information disclosure and denial of service (CVE-2020-4414)

Summary IBM® Db2® on Windows could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service...

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow leading to a privileged escalation (CVE-2020-4363)

Summary IBM® Db2® is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. Vulnerability Details CVEID: CVE-2020-4363 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connec...