CVE-2018-1426

🗓️ 22 Mar 2018 12:00:00Reported by ibmType

IBM GSKit duplicates PRNG state across fork() system calls in IBM DB2 for Linux, UNIX and Windows, leading to duplicate Session IDs and key material risk. IBM X-Force ID: 139071

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities	2 Jul 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX	2 Jan 201914:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities	19 Jul 201808:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM GSKit affect IBM Personal Communications	30 Jul 201817:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Collector for SAP Applications is affected by GSKit and GSKit-Crypto vulnerabilities	30 Aug 201812:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the GSKit component of Tivoli Netcool/OMNIbus	17 Jun 201815:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for VMware	1 Feb 202211:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the GSKit library	11 Jul 201819:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm

NVD

Vulners

Node

ibm db2Match9.7

ibm db2Match10.1

ibm db2Match10.5

ibm db2Match11.1

AND

linux linux_kernel

Node

ibm db2Match9.7

ibm db2Match10.1

ibm db2Match10.5

ibm db2Match11.1

AND

microsoft windowsMatch-

[
  {
    "product": "DB2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.5"
      },
      {
        "status": "affected",
        "version": "10.1"
      },
      {
        "status": "affected",
        "version": "9.7"
      },
      {
        "status": "affected",
        "version": "11.1"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105580
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/139071
securitytracker	www.securitytracker.com/id/1041012
ibm	www.ibm.com/support/docview.wss

21 Nov 2024 03:59Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.4

CVSS 37.4 - 9.1

EPSS0.00677

CWE-335