CVE-2020-5024 — IBM DB2 vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.6%
top 18.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedMar 11
Latest updateMay 24

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/db211.1.0.0 — 11.1.4.6+4

🔴Vulnerability Details

2
GHSA
GHSA-pq8r-j5f2-6x78: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9↗2022-05-24
▶
CVEList
CVE-2020-5024: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9↗2021-03-11
▶
CVE-2020-5024 — IBM DB2 vulnerability | cvebase