CVE-2018-1635

MEDIUM

IBM Informix Dynamic Server Enterprise Edition 12.1 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=ibm10964987

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/144439

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20190903-0002/

Scores

CVSS v3 6.7

EPSS 0.0044

EPSS Percentile 35.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

ibm/informix_dynamic_server 12.10 fc1 (12 CPE variants)

Published Aug 20, 2019

Tracked Since Feb 18, 2026