CVE-2020-4355

published 2020-07-01

CVE-2020-4355: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I N A L

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to increase the resource usage on the system. IBM X-Force ID: 178507.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2	—	—
ibm	db2	—	—
ibm	db2	—	—
ibm	db2	—	—
ibm	db2_for_linux_unix_and_windows	—	—
ibm	db2_for_linux_unix_and_windows	—	—
ibm	db2_for_linux_unix_and_windows	—	—
ibm	db2_for_linux_unix_and_windows	—	—
ibm	db2_for_linux_unix_and_windows	—	—

CWE-400