Vulnetix
Try Vulnetix Request Demo
CVE-2020-5025 PUBLISHED CVSS 8.399999618530273 HIGH

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.

EPSS 0.29% · 52.0th percentile

Risk Scores

CVSS v3.0
8.399999618530273
CVSS:3.0/PR:N/AV:L/AC:L/UI:N/S:U/I:H/A:H/C:H/RC:C/RL:O/E:U
EPSS Score
0.29%
52.0th percentile

Affected Products

VendorProductVersions
IBMDB2 for Linux, UNIX and Windows10.5, 10.1, 9.7
ibmdb29.7, 9.7, 9.7
IBMDb2
netapponcommand_insight

Timeline

References

Open in Interactive Console →