CVE-2020-4135: High severity IBM DB2 vulnerability
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.
Other sources
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4135?
CVE-2020-4135 has a medium severity rating due to its potential to cause a denial of service through excessive memory usage.
Who is affected by CVE-2020-4135?
CVE-2020-4135 affects IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5.
How do I fix CVE-2020-4135?
To fix CVE-2020-4135, update IBM DB2 to a version that includes the necessary security patches provided by IBM.
What type of attack does CVE-2020-4135 facilitate?
CVE-2020-4135 facilitates a denial of service attack against affected DB2 installations.
Can CVE-2020-4135 be exploited remotely?
Yes, CVE-2020-4135 can be exploited remotely by an unauthenticated user.