Lucene search
IbmCVELIST:CVE-2020-4701HistoryNov 19, 2020 - 3:15 p.m.
CVE-2020-4701
2020-11-1915:15:18
ibm
www.cve.org
5
ibm db2
buffer overflow
bounds checking
local attacker
arbitrary code
root privileges
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS
0
Percentile
5.1%
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges.
CNA Affected
[
{
"product": "DB2 for Linux, UNIX and Windows",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.5"
},
{
"status": "affected",
"version": "11.1"
},
{
"status": "affected",
"version": "11.5"
}
]
}
]Related
ibm
ibm
nessus
nessus
prion
prion
Buffer overflow
2020-11-19 16:15:00
nvd
nvd
CVE-2020-4701
2020-11-19 16:15:10
cve
cve
CVE-2020-4701
2020-11-19 16:15:10
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2020-4701