CVEvulnerability
CVE-2018-1710
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364.
Affected configurations
• ibm db2 10.1
• ibm db2 10.5
• ibm db2 11.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/105391 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146364 VDB Entry, Vendor Advisory
- https://usn.ubuntu.com/3906-2/ usn.ubuntu.com
- https://www.ibm.com/support/docview.wss?uid=ibm10729981 Vendor Advisory
- http://www.securityfocus.com/bid/105391 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146364 VDB Entry, Vendor Advisory
- https://usn.ubuntu.com/3906-2/ usn.ubuntu.com
- https://www.ibm.com/support/docview.wss?uid=ibm10729981 Vendor Advisory