high7.8
CVE-2020-5025
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper …
Impact
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Db2 | from 11.1.0.0 before 11.1.4.6 from 11.5 before 11.5.5.0 Versions 9.7, 10.1, 10.5 |
| Netapp | Oncommand Insight | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/193661
- https://security.netapp.com/advisory/ntap-20210409-0003/
- https://www.ibm.com/support/pages/node/6427855
- https://exchange.xforce.ibmcloud.com/vulnerabilities/193661
- https://security.netapp.com/advisory/ntap-20210409-0003/
- https://www.ibm.com/support/pages/node/6427855