CVE-2020-5024
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
48.7%
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2 | * | cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:-:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp10:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp2:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp3:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp3a:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp4:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp5:*:*:*:*:*:* |
| ibm | db2 | 9.7 | cpe:2.3:a:ibm:db2:9.7:fp6:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
48.7%