CVE-2020-4420: High severity ibm db2 universal database vulnerability

Published Jul 1, 2020

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076.

Other sources

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command.

Affected Software

7 affected components

IBM DB2=9.7.0.0

IBM DB2=10.1.0.0

IBM DB2=10.5.0.0

IBM DB2=11.1.0.0

IBM DB2=11.5.0.0

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6242362

Event History

Jul 1, 2020

CVE Published

via MITRE·02:25 PM

Data Sourced

via MITRE·02:25 PM

DescriptionSeverityWeakness

Aug 4, 2024

Data Sourced

via IBM·08:14 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6242362

Frequently Asked Questions

What is the severity of CVE-2020-4420?

CVE-2020-4420 is considered a high severity vulnerability as it allows an unauthenticated attacker to cause a denial of service.

How do I fix CVE-2020-4420?

To fix CVE-2020-4420, update IBM DB2 to a version that is not affected by this vulnerability, as specified in IBM's security announcements.

Which IBM DB2 versions are affected by CVE-2020-4420?

CVE-2020-4420 affects IBM DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5.

What kind of attack does CVE-2020-4420 facilitate?

CVE-2020-4420 facilitates a denial of service attack due to a hang in the execution of a terminate command.

Is CVE-2020-4420 relevant for both Linux and Windows operating systems?

Yes, CVE-2020-4420 is relevant for IBM DB2 running on both Linux and Windows operating systems.