IBM DB2 9.7 Fixpack 4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2:9.7:fp4:*:*:*:*:*:*
part: a version: 9.7 update: fp4
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 (5963772f-bccc-50e2-883c-858291bf5bb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5025 |
vulnerable | 2026-06-08 05:26:41.387129 |
Details available
HIGH (8.4)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.
Published: 2021-03-11T15:30:26.575Z
Updated: 2024-09-16T20:52:16.858Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5024 |
vulnerable | 2026-06-08 05:26:41.384108 |
Details available
HIGH (7.5)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.
Published: 2021-03-11T15:30:25.884Z
Updated: 2024-09-16T22:40:07.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4976 |
vulnerable | 2026-06-08 05:26:41.287040 |
Details available
MEDIUM (5.1)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.
Published: 2021-03-11T15:30:25.232Z
Updated: 2024-09-16T19:20:36.208Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0712 |
vulnerable | 2026-06-08 05:00:44.587332 |
Details available
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
Published: 2012-03-20T20:00:00.000Z
Updated: 2024-08-06T18:30:54.048Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0711 |
vulnerable | 2026-06-08 05:00:44.582746 |
Details available
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
Published: 2012-03-20T20:00:00.000Z
Updated: 2024-08-06T18:30:54.182Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0710 |
vulnerable | 2026-06-08 05:00:44.578581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0709 |
vulnerable | 2026-06-08 05:00:44.566066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.