Description
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/128057
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22006885
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1039300
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100685
Scores
CVSS v3
6.7
EPSS
0.0038
EPSS Percentile
30.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (48)
ibm/db2
9.7
ibm/db2
9.7.0.1
ibm/db2
9.7.0.2
ibm/db2
9.7.0.3
ibm/db2
9.7.0.4
ibm/db2
9.7.0.5
ibm/db2
9.7.0.6
ibm/db2
9.7.0.7
ibm/db2
9.7.0.8
ibm/db2
9.7.0.9 (2 CPE variants)
... and 38 more
Published
Sep 12, 2017
Tracked Since
Feb 18, 2026