CVE-2018-1459

HIGH

IBM DB2 9.7, 10.1, 10.5, 11.1 - Stack-Based Buffer Overflow

Title source: llm

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210.

References (3)

Core 3

Core References

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/140210

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041005

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22016142

Scores

CVSS v3 7.8

EPSS 0.0051

EPSS Percentile 40.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (4)

ibm/db2 9.7

ibm/db2 10.1

ibm/db2 10.5

ibm/db2 11.1

Published May 25, 2018

Tracked Since Feb 18, 2026