First published: Wed Dec 23 2020(Updated: )
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a denial of service inside the "DB2 Management Service".
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Db2 | =9.7 | |
Ibm Db2 | =10.1 | |
Ibm Db2 | =10.5 | |
Ibm Db2 | =11.1 | |
Ibm Db2 | =11.5 | |
Linux Linux kernel | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2020-4642.
The severity level of CVE-2020-4642 is medium.
IBM DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5 are affected by CVE-2020-4642.
A local attacker can exploit CVE-2020-4642 to cause a denial of service inside the "DB2 Management Service".
More information about CVE-2020-4642 can be found on the following references: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/185589), [Reference 2](https://www.ibm.com/support/pages/node/6391652), [Reference 3](https://security.netapp.com/advisory/ntap-20210129-0009/)