CVE-2020-4135

HIGH

IBM DB2 9.7, 10.1, 10.5, 11.1, 11.5 - Unauthenticated Denial of Service via Crafted Packets

Title source: llm

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/2876307

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/173806

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20210108-0001/

Scores

CVSS v3 7.5

EPSS 0.0091

EPSS Percentile 76.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (6)

ibm/db2 9.7

ibm/db2 10.1

ibm/db2 10.5

ibm/db2 11.1

ibm/db2 11.5

netapp/oncommand_insight

Published Feb 19, 2020

Tracked Since Feb 18, 2026