{"id":36743,"date":"2020-08-21T13:38:59","date_gmt":"2020-08-21T13:38:59","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/"},"modified":"2020-08-21T13:38:59","modified_gmt":"2020-08-21T13:38:59","slug":"shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/","title":{"rendered":"Shared memory vulnerability in IBM&#8217;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching"},"content":{"rendered":"<p>A bug-hunter has uncovered a vulnerability in IBM&#8217;s popular enterprise database which, if left unpatched, could allow a local user to access data and kick off a denial-of-service attack.<\/p>\n<p>Security firm Trustwave said the shared memory vulnerability in Db2 &#8211; <a target=\"_blank\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-4414\" rel=\"noopener noreferrer\">CVE-2020-4414<\/a> &#8211; was similar to the <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/06\/18\/cisco_webex\/\" rel=\"noopener noreferrer\">problems found with Cisco&#8217;s Webex in June (<\/a><a target=\"_blank\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-3347\" rel=\"noopener noreferrer\">CVE-2020-3347<\/a>).<\/p>\n<p>According to TrustWave, &#8220;Only Db2 for LUW (Linux, Unix, Windows) is affected. Db2 for other platforms like IBM mainframes and z\/OS are unaffected.&#8221;<\/p>\n<p>Martin Rakhmanov, security research manager at Trustwave, said: &#8220;Through recent research we&#8217;ve seen the emergence of shared memory vulnerabilities becoming a more common issue.&#8221;<\/p>\n<p>The Db2 trace facility could allow any local user to gain read and write access to a shared memory area because the developers had not included explicit memory protections around that function, he said. As such, nefarious insiders could exploit the vulnerability.<\/p>\n<p>&#8220;This allows accessing critically sensitive data as well as the ability to change how the trace subsystem functions, which could result in a denial of service,&#8221; Rakhmanov added.<\/p>\n<p>The Db2 trace facility captures a log of control flow information \u2013 such as functions and associated parameter values \u2013 and is used by Db2 tech support to diagnose database problems.<\/p>\n<p>In his <a target=\"_blank\" href=\"https:\/\/www.trustwave.com\/en-us\/resources\/blogs\/spiderlabs-blog\/ibm-db2-shared-memory-vulnerability-cve-2020-4414\/\" rel=\"noopener noreferrer\">post<\/a>, Rakhmanov explained that by launching Process Explorer in Windows, for example, users can see there are no permissions guarding shared memory \u2013 anyone can read from and write to it. By then enabling Db2 tracing, the users can see what has been written to shared memory. As well as exposing the data, the vulnerability offers the possibility of launching a denial-of-service condition &#8220;simply by writing incorrect data over that memory section&#8221;.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2018\/03\/02\/shutterstock_migration.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"Wildebeest crossing the Mara River during the annual great migration between Tanzania and the Masai Mara in Kenya.\"><\/p>\n<h2 title=\"Plenty of competition out there for Big Blue\">DB2 migration problems caused IBM to resurrect Netezza, according to analyst<\/h2>\n<p><a href=\"https:\/\/www.theregister.com\/2020\/06\/05\/db2_migration_netezza\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>The vulnerability could potentially affect Db2 editions 9.7, 10.1, 10.5, 11.1, and 11.5. A <a target=\"_blank\" href=\"https:\/\/www.ibm.com\/support\/pages\/node\/6242356\" rel=\"noopener noreferrer\">special build patch was issued by IBM (here)<\/a> over a month ago, but if you haven&#8217;t patched, don&#8217;t delay.<\/p>\n<p>IBM has not responded to <i>The Register<\/i>&#8216;s request for comment, but its own posting said: &#8220;Db2 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service.&#8221;<\/p>\n<p>Needless to say, TrustWave has recommended Db2 users apply the available patch immediately.<\/p>\n<p>Although lacking the limelight of more modern or cloud-native databases, Db2 still has a loyal userbase including Audi, Japan&#8217;s Mizuho Bank, and Wells Fargo.<\/p>\n<p>In March, Db2 users on IBM Cloud were <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/03\/17\/ibm_cloud_tuesday_partial_outage\/\" rel=\"noopener noreferrer\">hit by an outage<\/a> lasting several hours. Customers running services hosted at its Dallas data centre \u2013 including Watson AI, IBM Cloud, and Db2 \u2013 were either partially or completely down.<\/p>\n<p>In 2018, Big Blue <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2018\/11\/29\/ibm_db2_security_bugs\/\" rel=\"noopener noreferrer\">issued a notice for CVE-2018-1897<\/a>, an elevation-of-privilege flaw that, if exploited, could allow a logged-in attacker to execute code and commands as an admin. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2020\/08\/21\/ibm_db2_shared_memory_flaw\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lack of protections around trace facility gives local users read and write access A bug-hunter has uncovered a vulnerability in IBM&#8217;s popular enterprise database which, if left unpatched, could allow a local user to access data and kick off a denial-of-service attack.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":36744,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-36743","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Shared memory vulnerability in IBM&#039;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Shared memory vulnerability in IBM&#039;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-08-21T13:38:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Shared memory vulnerability in IBM&#8217;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching\",\"datePublished\":\"2020-08-21T13:38:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/\"},\"wordCount\":502,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/\",\"name\":\"Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg\",\"datePublished\":\"2020-08-21T13:38:59+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shared memory vulnerability in IBM&#8217;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/","og_locale":"en_US","og_type":"article","og_title":"Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-08-21T13:38:59+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Shared memory vulnerability in IBM&#8217;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching","datePublished":"2020-08-21T13:38:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/"},"wordCount":502,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/","url":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/","name":"Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc \u2013 so get patching 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg","datePublished":"2020-08-21T13:38:59+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/08\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/shared-memory-vulnerability-in-ibms-db2-database-could-let-nefarious-insiders-wreak-havoc-so-get-patching\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Shared memory vulnerability in IBM&#8217;s Db2 database could let nefarious insiders wreak havoc \u2013 so get patching"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=36743"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36743\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/36744"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=36743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=36743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=36743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}