CVE-2020-4799 Memory corruption in Informix Dynamic Server

High 7.8 Published 8 Oct 2020 Updated 16 Sep 2024

A local attacker can exploit an out-of-bounds write in IBM Informix to execute arbitrary commands with elevated privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-4799?

CVE-2020-4799 is a high-severity memory corruption vulnerability in Ibm Informix Dynamic Server, published on 8 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460.

Weakness: CWE-787

Which versions are affected by CVE-2020-4799?

It affects 1 product.

Products include Ibm Informix Dynamic Server.

How do I fix CVE-2020-4799?

No fix has been published for CVE-2020-4799 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-4799 being exploited?

There is no known exploitation of CVE-2020-4799 in the wild and no public exploit code.

All Ibm Informix Dynamic Server vulnerabilities

Sources

Also known as GHSA-8mjj-9h95-c27m.