CVE-2020-5025
11.03.2021, 16:15
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 11.1.0.0 ≤ 𝑥 < 11.1.4.6 |
| ibm | db2 | 11.5 ≤ 𝑥 < 11.5.5.0 |
| ibm | db2 | 9.7 |
| ibm | db2 | 9.7:fp1 |
| ibm | db2 | 9.7:fp10 |
| ibm | db2 | 9.7:fp2 |
| ibm | db2 | 9.7:fp3 |
| ibm | db2 | 9.7:fp3a |
| ibm | db2 | 9.7:fp4 |
| ibm | db2 | 9.7:fp5 |
| ibm | db2 | 9.7:fp6 |
| ibm | db2 | 9.7:fp7 |
| ibm | db2 | 9.7:fp8 |
| ibm | db2 | 9.7:fp9 |
| ibm | db2 | 9.7:fp9a |
| ibm | db2 | 10.1 |
| ibm | db2 | 10.1:fp1 |
| ibm | db2 | 10.1:fp2 |
| ibm | db2 | 10.1:fp3 |
| ibm | db2 | 10.1:fp3a |
| ibm | db2 | 10.1:fp4 |
| ibm | db2 | 10.1:fp5 |
| ibm | db2 | 10.5 |
| ibm | db2 | 10.5:fp1 |
| ibm | db2 | 10.5:fp2 |
| ibm | db2 | 10.5:fp3 |
| ibm | db2 | 10.5:fp3a |
| ibm | db2 | 10.5:fp4 |
| ibm | db2 | 10.5:fp5 |
| ibm | db2 | 10.5:fp6 |
| ibm | db2 | 10.5:fp7 |
| ibm | db2 | 10.5:fp8 |
| ibm | db2 | 10.5:fp9 |
| netapp | oncommand_insight | - |
𝑥
= Vulnerable software versions
References