KB5032921 - A possible stack buffer overflow from a remote code execution vulnerability has been exposed in the OLEDB provider for DB2.

Introduction

A possible stack buffer overflow from a remote code execution has been exposed in the OLEDB provider for DB2.  This fix addresses this issue in both Host Integration Server 2020 and the stand-alone DB2OLEDBv7.

Important notes about this package

• This package contains fixes for all of the product components listed above, however only those components are currently installed on the system will be updated.

• For more information about the terminology that is used to describe Microsoft product updates, see the following Knowledge Base article:

Description of the standard terminology that is used to describe Microsoft software updates.

How to obtain this hotfix package

This package is now available from Microsoft the Microsoft Download Center. This package is intended to correct only the problems that are described in this article. Apply this package only to systems that are experiencing these specific problems.

Download this fix now

Prerequisites

If you are obtaining this fix for Host Integration Server 2020, you need to have Microsoft Host Integration Server 2020 installed with CU1.

Download Host Integration Server 2020 CU1

If you are obtaining this fix for DB2OLEDBv7, then you need to uninstall your current version of DB2OLEDBv7 and install the version that can be downloaded on the link above (the link with the title "Download this fix")

Restart requirement

You may have to restart the computer after you apply this fix.