CVE-2020-4363: Buffer Overflow

Published Jul 1, 2020

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960.

Affected Software

7 affected components

IBM DB2=9.7.0.0

IBM DB2=10.1.0.0

IBM DB2=10.5.0.0

IBM DB2=11.1.0.0

IBM DB2=11.5.0.0

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6242332

Event History

Jul 1, 2020

CVE Published

via MITRE·02:25 PM

Data Sourced

via MITRE·02:25 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-4363?

CVE-2020-4363 has a high severity rating due to the potential for local attackers to execute arbitrary code with root privileges.

How do I fix CVE-2020-4363?

To mitigate CVE-2020-4363, apply the relevant security patches provided by IBM for the affected DB2 versions.

Which DB2 versions are affected by CVE-2020-4363?

CVE-2020-4363 affects IBM DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5.

Can CVE-2020-4363 be exploited remotely?

CVE-2020-4363 requires local access to exploit, as it is a local buffer overflow vulnerability.

What type of vulnerability is CVE-2020-4363?

CVE-2020-4363 is classified as a buffer overflow vulnerability caused by improper bounds checking.