CVE-2020-4414

Summary

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service. IBM X-Force ID: 179989.

Affected Software

VendorProductVersion RangeStatus
IBMDB2 for Linux- UNIX and Windows10.1affected
IBMDB2 for Linux- UNIX and Windows10.5affected
IBMDB2 for Linux- UNIX and Windows11.1affected
IBMDB2 for Linux- UNIX and Windows11.5affected
IBMDB2 for Linux- UNIX and Windows9.1affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References