漏洞信息详情
IBM DB2 缓冲区错误漏洞
漏洞简介
IBM DB2是美国IBM公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBMi、z/OS以及Windows服务器版本。
IBM DB2 存在缓冲区错误漏洞,该漏洞源于不适当的边界检查导致的,这种检查可能允许本地攻击者可利用该漏洞在系统上使用root特权执行任意代码。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://www.ibm.com/support/pages/node/6369607
参考网址
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/187078
来源:CONFIRM
链接:https://www.ibm.com/support/pages/node/6370025
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-is-vulnerable-to-a-buffer-overflow-cve-2020-4701-2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-is-vulnerable-to-a-buffer-overflow-cve-2020-4701-3/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-is-vulnerable-to-a-buffer-overflow-cve-2020-4701-4/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-is-vulnerable-to-a-buffer-overflow-cve-2020-4701-5/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-4701
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilitiy-identified-in-ibm-db2-that-is-shipped-as-component-and-pattern-type-or-ptype-with-cloud-pak-system-and-cloud-pak-system-software-suite-cloud-pak-system-address/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-warehouse-has-released-a-fix-in-response-to-multiple-vulnerabilities-found-in-ibm-db2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-ibm-db2-shipped-with-ibm-storediq-for-legal/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-db2-affect-the-ibm-spectrum-protect-server-cve-2020-4701-cve-2020-4739/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4108/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-ibm-db2-server-vulnerabilities-affect-ibm-emptoris-program-management/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/IBM-DB2-buffer-overflow-33930
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-is-vulnerable-to-a-buffer-overflow-cve-2020-4701/
受影响实体
暂无
补丁
- IBM DB2 缓冲区错误漏洞的修复措施<!--2020-11-18-->
还没有评论,来说两句吧...