CVE-2020-5025

Published: Mar 11, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.

Affected (34)

Products: Ibm: Db2 · Netapp: Oncommand Insight

1 product

1 product

Configuration A

33 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Db2	From 11.1.0.0 to 11.1.4.6
Ibm Db2	From 11.5 to 11.5.5.0
Ibm Db2	Version 10.1
Ibm Db2	Version 10.1 fp1
Ibm Db2	Version 10.1 fp2
Ibm Db2	Version 10.1 fp3
Ibm Db2	Version 10.1 fp3a
Ibm Db2	Version 10.1 fp4
Ibm Db2	Version 10.1 fp5
Ibm Db2	Version 10.5
Ibm Db2	Version 10.5 fp1
Ibm Db2	Version 10.5 fp2
Ibm Db2	Version 10.5 fp3
Ibm Db2	Version 10.5 fp3a
Ibm Db2	Version 10.5 fp4
Ibm Db2	Version 10.5 fp5
Ibm Db2	Version 10.5 fp6
Ibm Db2	Version 10.5 fp7
Ibm Db2	Version 10.5 fp8
Ibm Db2	Version 10.5 fp9
Ibm Db2	Version 9.7
Ibm Db2	Version 9.7 fp10
Ibm Db2	Version 9.7 fp1
Ibm Db2	Version 9.7 fp2
Ibm Db2	Version 9.7 fp3
Ibm Db2	Version 9.7 fp3a
Ibm Db2	Version 9.7 fp4
Ibm Db2	Version 9.7 fp5
Ibm Db2	Version 9.7 fp6
Ibm Db2	Version 9.7 fp7
Ibm Db2	Version 9.7 fp8
Ibm Db2	Version 9.7 fp9
Ibm Db2	Version 9.7 fp9a