High severity7.5NVD Advisory· Published Feb 19, 2020· Updated Jun 17, 2026

CVE-2020-4135

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/DB2 Connect Serverllm-fuzzy
Range: 9.7, 10.1, 10.5, 11.1, and 11.5
IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
Range: 9.7, 10.1, 10.5, 11.1, and 11.5
IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
Range: 9.7

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/173806nvdVDB EntryVendor Advisory
security.netapp.com/advisory/ntap-20210108-0001/nvdThird Party Advisory
www.ibm.com/support/pages/node/2876307nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000